SIEM Engineer

TCS is hiring for a Google Chronicle SIEM Engineer role. Responsibilities include designing, implementing, and optimizing Google Chronicle SIEM for scalable log ingestion, parsing, normalization, and enrichment. Create and update correlation rules and use cases. Develop and fine-tune detection rules, parsers, and correlation logic to improve threat detection accuracy. Integrate diverse log sources including firewalls, endpoint security, cloud services, IAM, and network devices. Build and maintain custom parsers and dashboards to enhance visibility into security events. Collaborate with threat hunting and detection engineering teams to identify and implement new detection logic. Design and implement automation workflows (SOAR-based or API-based) to reduce analyst workload and response time. Automate alert triage, enrichment, and response actions using scripts, playbooks, or orchestration tools. Integrate Google Chronicle with automation platforms such as Cortex XSOAR, Splunk SOAR, Swimlane, or custom Python-based frameworks. Experience required: 4-15 years. Joining location: PAN India.