Henkel Hiring for SIEM Analyst ‏ (d/f/m) at Bengaluru, Karnataka Full Time

HENKEL IS FOR THOSE WHO STEP UP. DO YOU?

At Henkel, you can make a difference and craft your career. That’s why you own your projects and take full responsibility from an early stage. Our unique brands in markets around the world open up countless opportunities to follow your convictions and explore new paths. If you have an entrepreneurial mindset that allows you to always think out of the box – take the chance and shape the digital future together with us.

YOUR ROLE

• Onboard new log sources into our SIEM, design and implement log configurations, develop parsing and normalization pipelines for the log data and ensure their correct ingestion into Elasticsearch
• Maintain existing parsing pipelines by checking them for errors/updates, gaps in parsing, required extensions to latest version of Elastic Common Schema normalization and adapting the parsing pipelines as needed
• Document the work done on log sources and pipelines
• Participate in development of SIEM monitoring use cases (alert rules, supporting visualizations/dashboards, handling guidelines, identifying orchestration opportunities, documentation)
• Proactively investigate and test new SIEM monitoring use cases based on recent threat intelligence, new log sources and ongoing events
• Tune and adapt SIEM use cases to improve alert quality
• Create handling guidelines to help SOC analysts with alert investigation and remediation
• Participate in alert investigation and remediation
• Support in developing monitoring capabilities including dashboards and customized alerts for the health of the SIEM
• Monitor SIEM health on basis of the developed monitoring capabilities
• React to monitoring events by investigation and solving root cause of issues
• Maintain SIEM software stack by performing upgrades based on existing Ansible scripts. Troubleshoot and adapt the Ansible scripts and upgrade procedures as needed
• Troubleshoot faulty log sources by analyzing the root cause of a fault and either fixing it or supporting the responsible log source owners with that
• Troubleshoot general errors in the SIEM solution
• Participate in overall ongoing development of the SIEM
• Implement new features like for example enrichments in the SIEM
• Develop roadmaps for further extension and utilization of the SIEM
• Ensure the SIEM is well embedded in the overall SOC toolchain and participate in bringing this toolchain forward

YOUR SKILLS

• Master’s degree in Computer Science or IT/Engineering with focus on IT security
• 5 years of broad professional experience in a similar role
• Experience in developing and expanding SIEM solutions and content is a must. Additional hands-on experience with an ELK stack would be beneficial
• Well-settled experience in IT security management with the ability to deep-dive into technical topics
• Proven analytical and report writing skills
• Fluent in English
• Start-up mentality and the willingness to develop together in a young team

Henkel is an equal opportunity employer. We look for a diverse team of individuals who possess different backgrounds, experiences, personalities and mindsets.

JOB ID: req30211

Contract & Job type: Full Time, Regular

Contact information for application-related questions: [email protected]

Please do not use this email address for sending your application or CV. To apply, please click on the “Apply Now” button below. Applications sent via e-mail will not be accepted.