LogRhythm SIEM Engineer

Location: Bengaluru

We are seeking a skilled  Log Rhythm Resident Engineer (RE)  to join our team on an onsite basis. The ideal candidate will be responsible for deploying, administering, optimizing, and supporting the Log Rhythm SIEM platform, ensuring effective security monitoring, log management, and incident response support for our clients. This is a high-impact role requiring technical expertise, strong troubleshooting abilities, and excellent customer-facing communication skills.

Key Responsibilities:

Log Rhythm Platform Administration
Install, configure, and maintain Log Rhythm SIEM components.
Perform upgrades, patches, and routine health checks.
Monitor system performance, storage, and log retention policies.
Security Monitoring
Develop, tune, and optimize correlation rules, alarms, and AI Engine rules.
Minimize false positives and improve detection accuracy.
Customize dashboards, reports, and alerts for SOC teams.
Log Source Integration
Onboard and normalize logs from:
Network devices (firewalls, routers, IDS/IPS)
Servers (Windows, Linux, Unix)
Security tools (EDR, AV, IAM, cloud platforms)
Troubleshoot log parsing and data ingestion issues.
Incident Response & SOC Support
Support SOC analysts during security incidents.
Assist in threat investigations and root-cause analysis.
Provide guidance on incident response workflows using Log Rhythm.
Customer Advisory & Enablement
Act as a trusted security advisor to stakeholders.
Provide hands-on training to SOC and IT teams.
Recommend SIEM best practices and architecture improvements.
Collaboration & Escalation
Work with Log Rhythm TAC (Technical Assistance Center) on escalated issues.
Document configurations, procedures, and runbooks.
Required Skills &

Qualifications:

Technical

Skills:

Strong experience with Log Rhythm SIEM.
Solid understanding of:
Security operations (SOC)
Network security concepts
Windows/Linux administration
TCP/IP, DNS, HTTP, SSL, firewalls

Experience with log analysis and threat detection.
Scripting skills:
Power Shell, Python, Bash (preferred).

Experience:

3–7+ years in SIEM, SOC, or cybersecurity operations.
Prior experience in one or more of the following roles:
SIEM Engineer
SOC Analyst (Tier 2/3)
Security Engineer
Log Rhythm Administrator
Certifications (Preferred):
Log Rhythm Certified Professional / Admin
CISSP, GCIH, GCED, Security+
ITIL (good to have)