Company Name: TechDefence Labs Solutions Limited
Company Address: 9th Floor, Abhishree Adroit, Near Mansi Circle, Judges Bunglow Road, Nyay Marg, Vastrapur, Ahmedabad, Gujarat 380015
Work Location: Mumbai / Bangalore
Company Website: https://techdefencelabs.com/
Company LinkedIn Page: https://www.linkedin.com/company/techdefence/posts/?feedView=all
Designation: Senior Security Analyst
Experience: 5+ Years
JD for On-boarding Engineer.
Role overview:
Responsible for onboarding new log sources, ensuring data normalization, maintaining log quality, and supporting detection engineering initiatives.
The candidate should have strong hands-on experience in SIEM platform configuration, log parsing, data validation, and security use-case enablement.
Key responsibilities:
- Onboard and integrate multiple security and IT data sources into the SIEM platform.
- Support onboarding of-Network security devices (Firewalls, IDS/IPS, WAF, Proxies), EDR/XDR, IAM, Cloud platforms (AWS, Azure, GCP), Database and Infrastructure logs.
- Configure log collection using agents, APIs, syslog, connectors, and cloud-native integrations.
- Validate log ingestion, field extraction, parsing, and normalization.
- Ensure logs align with the SIEM data model and taxonomy standards.
- Perform data quality checks including completeness, timeliness, and accuracy.
- Design and implement log parsing rules, regex extraction, and field mappings.
- Ability to develop custom parsers and connectors.
- Troubleshoot ingestion and parsing issues across diverse data formats.
- Work closely with SOC analysts, detection engineers, platform administrators, and customers.
- Provide onboarding guidance and log requirement recommendations.
- Support audit and compliance log validation activities.
Required technical skill sets:
- Hands-on experience with at least one SIEM platform.
- Experience onboarding logs from AWS CloudTrail, GuardDuty, VPC Flow Logs, Azure Monitor, Entra ID logs, SaaS applications via APIs.
- Strong understanding of: Syslog protocols REST APIs, JSON, XML, CSV log formats, Regex and log parsing techniques, Event normalization and enrichment.
- Working knowledge of Python / Shell scripting.
- Experience with Linux/Unix and Windows logging mechanisms.
- Knowledge of network protocols and security telemetry.
- Understanding of SOC operations and incident detection lifecycle and MITRE framework.
