An AI agent that applies to roles like this on employers' own sites. 25 applications free, no card needed.
Posted over 15 days ago, so the role may have closed. Confirm on the employer's page when you apply, or see similar jobs.
Job Description
- s:
- Operations Support Engineer - R1
- 2-4 years of experience in security monitoring, alert triage, initial investigation and incident
- classification across the SOC environment. The engineer will primarily operate OpenText ArcSight,
- OpenText ArcSight SOAR, OpenText NetIQ and OpenText PAM, perform first-level troubleshooting,
- analyze security events and logs, execute defined SOAR playbooks/SOPs, manage incidents and
- escalate complex issues to L2.
- Skills: SIEM Monitoring . Security Event Analysis . Alert Triage . Log Analysis . Incident Classification .
- SOAR Playbook Execution . IAM/PAM Monitoring . AD/LDAP . Syslog . Windows/Linux Logs . TCP/IP
- DNS . Basic Threat Analysis . IOC . MITRE ATT&CK . ITSM . Incident Escalation
Skill Required: OpenText ArcSight . OpenText ArcSight SOAR . OpenText NetIQ . OpenText PAM
Alternate: SIEM: IBM QRadar, Microsoft Sentinel, Palo Alto Cortex XSIAM, SOAR: Splunk SOAR, Palo
Alto Cortex XSOAR, Swimlane, Turbine, IDAM: SailPoint, Saviynt, One Identity, Oracle IGA, Microsoft
Entra, PAM: CyberArk, BeyondTrust, ARCON
Location: Pune, Delhi, Bangalore and across Pan India.
Education: Diploma / B. Tech
Operations Support Engineer - R2
4-6 years of experience advanced security event investigation, application/platform troubleshooting
and incident analysis across the SOC environment. The senior engineer will provide advanced
support for OpenText ArcSight, OpenText ArcSight SOAR, OpenText NetIQ and OpenText PAM,
including log ingestion, parsing, correlation rules, SOAR playbooks, identity and privileged-access
issues, integrations and security incidents.
Skills: SIEM Troubleshooting . Log Ingestion . Parsing/Normalization . Correlation Rules . Detection
Engineering . SOAR Playbooks . API Integration . Identity Lifecycle . PAM Troubleshooting .
AD/LDAP . Threat Investigation . Threat Intelligence . MITRE ATT&CK . Linux/Windows . Network
Security . Python/PowerShell . Advanced RCA
Skills Preferred but not mandatory: OpenText ArcSight . OpenText ArcSight SOAR . OpenText NetIQ - OpenText PAM
Alternate:
SIEM: IBM QRadar, Microsoft Sentinel, Palo Alto Cortex XSIAM
SOAR: Splunk SOAR, Palo Alto Cortex XSOAR, Swimlane, Turbine
IDAM: SailPoint, Saviynt, One Identity, Oracle IGA, Microsoft Entra
PAM: CyberArk, BeyondTrust, ARCON
Location: Pune, Delhi, Bangalore and across Pan India.
Education: Diploma / B. Tech
- Sr. Support Engineer - R3
- 8-12 years of experience in advanced technical support, architecture, engineering and complex RCA
- across the SOC security platforms. The SME will provide expert-level support for OpenText ArcSight,
- OpenText ArcSight SOAR, OpenText NetIQ and OpenText PAM, covering SIEM/SOAR/IDAM/PAM
- architecture, detection engineering, correlation and parser development, threat hunting, security
- automation, integrations, performance, HA/DR and major incident support. Strong expertise in the
- identified alternate technologies is desirable to support technology transition, integration and future
- platform modernization.
- Skill Preferred but not mandatory: OpenText ArcSight . OpenText ArcSight SOAR . OpenText NetIQ .
- OpenText PAM
- Alternate Skill: SIEM: IBM QRadar, Microsoft Sentinel, Palo Alto Cortex XSIAM
- SOAR: Splunk SOAR, Palo Alto Cortex XSOAR, Swimlane, Turbine
- IDAM: SailPoint, Saviynt, One Identity, Oracle IGA, Microsoft Entra
- PAM: CyberArk, BeyondTrust, ARCON
- Location: Pune, Delhi, Bangalore and across Pan India.
- Education: Diploma / B. Tech
- Operations Support SME - R4
- 8-12 years of experience in providing expert guidance to L1-L3, lead critical RCA, coordinate OEM
- escalations and ensure resolution of complex and recurring issues. The Resident engineer shall be at
- least CISSP certified. Working Knowledge of HSM (Hardware Security Module)
- Skill: Provide L4/OEM-level technical support for SOC platforms. Own resolution of critical and
- recurring incidents escalated from L3 and perform deep-dive RCA and problem management.
- Review SOC architecture and provide technical recommendations. Manage capacity, performance,
- HA/DR and resilience issues. Maintain OEM support contracts/escalation channels and technical
- contacts. Provide knowledge transfer to L1/L2/L3 teams. Maintain technical documentation, RCA
- reports and known-error databases.
- Skills: SIEM/SOAR/IDAM/PAM Architecture . Advanced RCA . Detection Engineering . Correlation
- Development . Custom Parsers . Threat Hunting . Incident Response . Threat Intelligence . MITRE
- ATT&CK . Security Automation . API Integration . Performance Tuning . HA/DR . Security
- Engineering . Upgrade/Migration
- Preferred but not mandatory: OpenText ArcSight . OpenText ArcSight SOAR . OpenText NetIQ .
- OpenText PAM
- Alternate: SIEM: IBM QRadar, Microsoft Sentinel, Palo Alto Cortex XSIAM
- SOAR: Splunk SOAR, Palo Alto Cortex XSOAR, Swimlane, Turbine
- IDAM: SailPoint, Saviynt, One Identity, Oracle IGA, Microsoft Entra
- PAM: CyberArk, BeyondTrust, ARCON
- Location: Pune, Delhi, Bangalore and across Pan India.
- Education: Diploma / B. Tech
Skills
OperationsTechnical SupportSupport EngineerIf a job posting appears fraudulent, asks for payment, contains misleading information, or violates our guidelines, please report it immediately. Our team will review it promptly, Jobaaj does not charge any fee from the applicants.
Similar Jobs
View allLooking for something similar?
New Operations Maintenance & Support roles in India.
One email a day. Unsubscribe any time.

