Cyber Security Engineer – SIEM & EDR

DESCRIPTION (copy everything below this line):

About the role

We are looking for a skilled Cyber Security Engineer with 3–6 years of experience in security operations, SIEM and Endpoint Detection & Response (EDR). This is a full-time role based in Noida.

You will monitor security events, investigate incidents, improve detection capabilities and help strengthen the organisation's overall security posture, working closely with IT, infrastructure and network teams.

Key responsibilities

• Monitor and analyse security alerts using SIEM platforms.
• Investigate, triage and respond to security incidents and alerts.
• Perform threat hunting and root cause analysis for security incidents.
• Manage and optimise Endpoint Detection & Response (EDR) solutions.
• Develop, tune and maintain SIEM correlation rules and detection use cases.
• Monitor endpoint activity and ensure rapid containment of security threats.
• Conduct malware analysis and incident investigations.
• Analyse logs from Windows, Linux, Active Directory, firewalls, VPNs and cloud environments.
• Work with IT, infrastructure and network teams to remediate vulnerabilities.
• Support vulnerability assessments and remediation activities.
• Create incident reports, dashboards and security documentation.
• Take part in security audits and compliance initiatives.
• Stay up to date with emerging cyber threats, attack techniques and security best practices.

What we're looking for

• Essential: 3–6 years of hands-on experience in security operations, with strong SIEM and EDR skills.
• Experience with one or more SIEM platforms, such as Microsoft Sentinel, Splunk, IBM QRadar, ArcSight, LogRhythm or Elastic SIEM.
• Hands-on experience with EDR tools such as Microsoft Defender for Endpoint, CrowdStrike Falcon or SentinelOne.
• Practical experience in incident investigation, threat hunting and root cause analysis.
• Solid log analysis skills across Windows, Linux, Active Directory, network and cloud sources.
• Clear written communication for incident reports and security documentation.