Job Description

Role: Cyber Defense Senior SME 
Band : B3

About the role:

We are looking to strengthen our entity CISO team by onboarding a Cyber Defense Senior SME.

Roles & Responsibilities

• Design, implement, and maintain Security Information and Event Management (SIEM) solutions to facilitate security threat detection and response, across the organisation. Additionally, architect and manage Extended Detection and Response (XDR) systems to provide layered security coverage across endpoints, networks, and cloud environments. 
• Integrate log data from various sources, including cloud platforms (Azure, AWS, GCP), XDR, EDR, NDR, and IAM tools, ensuring comprehensive visibility and coverage.
• Leverage advanced analytics for threat hunting and proactive identification of emerging threats.
• Troubleshoot SIEM and XDR log interruption issues, to ensure continuous visibility of security logs from various data sources, and support rapid recovery during security incidents or cyber crises. 
• Lead and drive efforts to get threat intel from diverse sources (e.g. Open source, Recorded Future, Rapid 7 Insights etc) and use them build targeted threat hunting queries relevant to the organization and industry vertical to detect sophisticated attacks. 
• Collaborate with stakeholders to understand business requirements and translate them into technical SIEM and XDR capabilities which help in improved security posture of the organisation. Participate in cyber crisis handling exercises to ensure readiness and resilience. 
• Support in regulatory/compliance audits by providing SIEM and XDR tool specific security logs and incident reports, ensuring alignment with industry standards and regulatory frameworks. 
• Lead and support security incident response and post-incident analysis, ensuring lessons learned are captured and integrated into continuous improvement processes. 

Q͏ualifications

• 5-8 years of experience in Cybersecurity with knowledge and experience in various SIEM tools and technologies (E.g. Palo Alto Cortex, Splunk, Securonix, QRadar etc), as well as hands-on expertise with XDR platforms (such as Microsoft Defender, XDR, CrowdStrike Falcon, or similar). 
• Strong knowledge of security incident investigation and response processes, including containment, eradication, and recovery, with direct experience in managing large-scale cyber incidents and crisis scenarios.
• Experience in threat intelligence gathering, analysis, and operationalization, as well as leading threat hunting activities using SIEM, XDR, and EDR tools.
• Expertise in regulatory compliance requirements, audit support, and report generation for security events and incidents.