Home
Communities
Companies
- Companies
  
  Discover best places to work
- Compare Companies
  
  Compare & find best workplace
- Add Office Photos
  
  Bring your workplace to life
- Add Company Benefits
  
  Highlight your company's perks
Reviews
- Company reviews
  
  Read reviews for 6L+ companies
- Write a review
  
  Rate your former or current company
Salaries
- Browse salaries
  
  Discover salaries for 6L+ companies
- Salary calculator
  
  Calculate your take home salary
- Are you paid fairly?
  
  Check your market value
- Share your salary
  
  Help other jobseekers
- Gratuity calculator
  
  Check your gratuity amount
- HRA calculator
  
  Check how much of your HRA is tax-free
- Salary hike calculator
  
  Check your salary hike
Interviews
- Company interviews
  
  Read interviews for 40K+ companies
- Campus placements
  
  Interviews questions for 2K+ colleges
- Share interview questions
  
  Contribute your interview questions
Jobs
Awards

WINNERS AWAITED!
- ABECA 2025
  
  WINNERS AWAITED!
  
  AmbitionBox Employee Choice Awards - 4th Edition
- ABECA 2024
  
  AmbitionBox Employee Choice Awards - 3rd Edition
- AmbitionBox Best Places to Work 2022
  
  2nd Edition
- AmbitionBox Best Places to Work 2021
  
  1st Edition

Add office photos

Engaged Employer

Ernst & Young

Compare

3.4

based on 10.8k Reviews

Video summary

2000 Ernst & Young Jobs

TC-CS-Cyber Detection and Response-SIEM OT-Senior

Ernst Young

3.4

based on 10.8k Reviews

8-9 years

Bangalore / Bengaluru

1 vacancy

TC-CS-Cyber Detection and Response-SIEM OT-Senior

Ernst & Young

posted 2d ago

Job Role Insights

Flexible timing

Key skills for the job

Data Analytics Consulting Auditing Linux Administration Javascript Windows System Administration

+ 4 more

Job Description

We are seeking a highly skilled and passionate Senior SIEM Specialist with a strong background in Operational Technology (OT) to join our dynamic team. The ideal candidate will have proven expertise in SIEM content development, hands-on experience with OT tools, and a deep understanding of OT environments.

Key Capabilities

Design and develop impactful SIEM use cases tailored to OT environments.
Onboard data into SIEM from various sources, including custom parsers for unsupported sources.
- Verification of data of log sources in the SIEM, following the Common Information Model (CIM)
- Experience in parsing and masking of data prior to ingestion in SIEM
- Provide support for the data collection, processing, analysis and operational reporting systems including planning, installation, configuration, testing, troubleshooting and problem resolution
- Assist clients to fully optimize the SIEM system capabilities as well as the audit and logging features of the event log sources
- Assist client with technical guidance to configure end log sources (in-scope) to be integrated to the SIEM
Create advanced visualizations and dashboards to provide near real-time visibility into OT applications.
Provide operational support for globally deployed OT network monitoring solutions like Nozomi, Claroty, and Armis.
Good knowledge in programming or Scripting languages such as Python (preferred), JavaScript (preferred), Bash, PowerShell, Bash, etc.
Good experience in providing consulting to customers during the testing, evaluation, pilot, production and training phases to ensure a successful deployment.
- Understand customer requirements and recommend best practices for SIEM solutions.
- Offer consultative advice in security principles and best practices related to SIEM operations
- Design and document a SIEM solution to meet the customer needs

Expertise in SIEM content development which includes developing process for automated security event monitoring and alerting along with corresponding event response plans for systems
- Experience in creating use cases under Cyber kill chain and MITRE attack framework
- Sound knowledge in configuration of Alerts and Reports.
- Create, modify and tune the SIEM rules to adjust the specifications of alerts and incidents to meet client requirement
- Work with the client SPOC to for correlation rule tuning (as per use case management life cycle), incident classification and prioritization recommendations

Qualification & Experience

At least 8 years of overall experience in cybersecurity with a minimum of 4 years in OT/IOT Security solutions.
Strong knowledge of IT/OT/IoT communication protocols and experience supporting industrial protocols
Strong oral, written and listening skills are an essential component to effective consulting.
Strong background in network administration. Ability to work at all layers of the OSI models, including being able to explain communication at any level is necessary.
Must have knowledge of Vulnerability Management, Windows and Linux basics including installations, Windows Domains, trusts, GPOs, server roles, Windows security policies, user administration, Linux security and troubleshooting.

Good to have below mentioned experience with designing and implementation of Splunk with a focus on IT Operations, Application Analytics, User Experience, Application Performance and Security Management
- Multiple cluster deployments & management experience as per Vendor guidelines and industry best practices
- Troubleshoot Splunk platform and application issues, escalate the issue and work with Splunk support to resolve issues

Certification in any one of the SIEM Solution such as Splunk, IBM QRadar, Exabeam, Securonix will be an added advantage
Certifications in a core security related discipline will be an added advantage.

Employment Type: Full Time, Permanent

Read full job description

Prepare for Senio roles with real interview advice

Top Ernst & Young Senio Interview Questions

Q1. 1. What is Virtual DOM? How does it work & Its algorithm? 2. React component life cycle in detail? 3. Higher-order components? 4. Basic ... read more

asked in Senior Consultant interview

View answer (1)

Q2. Covid Vaccination Distribution Problem As the Government ramps up vaccination drives to combat the second wave of Covid-19, you are tasked ... read more

asked in React Developer interview

View answer (1)

Q3. Risk management experience and audit work experience?

asked in Senior Consultant interview

View answers (5)

View all 655 questions