Solutioning & Presales Engineer - SIEM

We are hiring a Solutioning & Presales Engineer to own the technical win on every SIEM and SOC opportunity Mitigata pursues (led by Splunk, and spanning Microsoft Sentinel, IBM QRadar, Google SecOps and other leading platforms) - from discovery and solution design to POC and handover to delivery.

Key Responsibilities:

• Run technical discovery with CISOs, SOC heads and IT teams to map log sources, use cases, compliance needs (RBI, SEBI CSCRF, CERT-In, DPDP) and data volumes.
• Design SIEM solutions on Splunk (Enterprise / Cloud, Enterprise Security, SOAR) and other platforms such as Microsoft Sentinel, IBM QRadar, Google SecOps, Securonix and Elastic - including architecture, ingest sizing, retention and licensing.
• Deliver product demos, workshops and proofs of concept, and convert them into technical wins within agreed timelines.
• Lead technical responses to RFPs and RFQs: compliance matrices, architecture diagrams, bills of material and effort estimates.
• Recommend the right SIEM for each client's scale, budget and stack, and build managed SIEM + SOC proposals that combine it with Mitigata services and Gordon AI SOC.
• Develop detection use cases, dashboards and correlation rules (SPL, KQL, AQL, YARA-L) for POCs and reference content.
• Work with Splunk / Cisco and other OEM partner teams on joint pursuits, deal registration and enablement.
• Hand over cleanly to delivery with a documented scope, design and success criteria.
• Train the sales team on SIEM positioning, competitive differentiation across platforms and qualification.

Key Skills & Qualifications:

• 4-8 years in cybersecurity presales, solutions engineering or SIEM / SOC engineering, ideally at an MSSP, SI or OEM.
• 2+ years hands-on with Splunk: SPL, data onboarding, Enterprise Security, dashboards and sizing.
• Working knowledge of at least one more SIEM - Microsoft Sentinel, IBM QRadar, Google SecOps, Securonix, Elastic, Exabeam or similar - and the ability to compare them objectively.
• Strong grasp of log sources and integrations: firewalls, EDR, identity, cloud (AWS, Azure, GCP), OT and core banking or ERP applications.
• Familiarity with SOC operations, MITRE ATT&CK, SOAR playbooks and threat intelligence.
• Proven track record of running POCs and writing technical sections of enterprise and government RFPs.
• Bachelor's degree in Computer Science, IT, Electronics or equivalent experience.

Good to have:

• Certifications: Splunk Core Certified Power User / Admin, Splunk Enterprise Security Certified Admin, Microsoft SC-200, IBM QRadar SIEM or Google SecOps.
• Security certifications such as CEH, CompTIA Security+, CISSP or GCIA.
• Exposure to BFSI and regulated sectors in India - RBI, SEBI CSCRF, IRDAI, CERT-In and DPDP requirements.
• Experience with AI-driven SOC, UEBA or XDR platforms. Scripting in Python or PowerShell for automation and custom integrations.

What makes you a strong fit:

• You explain complex architecture clearly to both a CISO and a CFO.
• You write crisp, well-structured proposals under deadline.
• You stay vendor-neutral and recommend what is right for the client.
• You enjoy working across sales, delivery and OEM partners.

What We Look For:

Every role needs strong skills in its craft. Beyond that, the people who thrive at Mitigata tend to share a few traits:

• You care about the problem. Protecting businesses and people motivates you, and the impact of your work matters to you.
• You think from first principles. You question assumptions and reason through new problems instead of relying only on how things have always been done.
• You take ownership. You care about the outcome, not just the task, and step in where you are needed.
• You act with integrity. You are candid about mistakes and handle confidential information with care. Our clients trust us in their most difficult moments.
• You learn quickly. Threats, regulations, and our products change often. We value how fast you grow as much as where you are today.

How We Hire:

Our process is structured and built to respect your time. It typically includes a recruiter conversation, a hiring manager conversation, and 3 to 5 interviews, one of which is a practical work sample based on real problems. We aim to reach a decision within 2 to 3 weeks of your first conversation and will keep you informed at every stage.

Skills

Presales, QRadar, SIEM, SOC, Securonix, Sentinel, Splunk