Senior Security Analyst

Company Name: TechDefence Labs Solutions Limited

Company Address: 9th Floor, Abhishree Adroit, Near Mansi Circle, Judges Bunglow Road, Nyay Marg, Vastrapur, Ahmedabad, Gujarat 380015

Work Location: Mumbai / Bangalore

Company Website: https://techdefencelabs.com/

Company LinkedIn Page: https://www.linkedin.com/company/techdefence/posts/?feedView=all

Designation: Senior Security Analyst

Experience: 5+ Years

JD for On-boarding Engineer.

Role overview:

Responsible for onboarding new log sources, ensuring data normalization, maintaining log quality, and supporting detection engineering initiatives.

The candidate should have strong hands-on experience in SIEM platform configuration, log parsing, data validation, and security use-case enablement.

Key responsibilities:

• Onboard and integrate multiple security and IT data sources into the SIEM platform.
• Support onboarding of-Network security devices (Firewalls, IDS/IPS, WAF, Proxies), EDR/XDR, IAM, Cloud platforms (AWS, Azure, GCP), Database and Infrastructure logs.
• Configure log collection using agents, APIs, syslog, connectors, and cloud-native integrations.
• Validate log ingestion, field extraction, parsing, and normalization.
• Ensure logs align with the SIEM data model and taxonomy standards.
• Perform data quality checks including completeness, timeliness, and accuracy.
• Design and implement log parsing rules, regex extraction, and field mappings.
• Ability to develop custom parsers and connectors.
• Troubleshoot ingestion and parsing issues across diverse data formats.
• Work closely with SOC analysts, detection engineers, platform administrators, and customers.
• Provide onboarding guidance and log requirement recommendations.
• Support audit and compliance log validation activities.

Required technical skill sets:

• Hands-on experience with at least one SIEM platform.
• Experience onboarding logs from AWS CloudTrail, GuardDuty, VPC Flow Logs, Azure Monitor, Entra ID logs, SaaS applications via APIs.
• Strong understanding of: Syslog protocols REST APIs, JSON, XML, CSV log formats, Regex and log parsing techniques, Event normalization and enrichment.
• Working knowledge of Python / Shell scripting.
• Experience with Linux/Unix and Windows logging mechanisms.
• Knowledge of network protocols and security telemetry.
• Understanding of SOC operations and incident detection lifecycle and MITRE framework.