Principal Information Security Engineer

Job not on LinkedIn

🔥 16 hours ago

🇮🇳 India – Remote

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 11%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.Why this score:

• Open for 1 day.
• Jobs at this company usually fill in 55 days.
• No salary listed.

Apply Now

Find Similar Remote Jobs

First American (India)

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 1994

🛡️ Insurance

💼 Consulting

🏥 Healthcare

💰 $450M Post-IPO Debt - First American on 2024-09

Insurance • Consulting • Healthcare

First American (India) is a Global Capability Center (GCC) of First American Financial Corporation that provides software development, data & analytics, back-office, and knowledge-processing services to support title insurance, settlement services, mortgage solutions and related risk-management operations across the US, UK, Australia and Canada. With locations in Bangalore, Hyderabad and Salem, FAI delivers corporate IT and production services for its parent company and emphasizes a people-first culture recognized as a top workplace.

📋 Description

• Design, implement, and maintain Splunk infrastructure, including Splunk and Cribl upgrades • Support Cribl onboarding using REST API, S3 collectors, HEC, and related methods • Implement and support multi-cloud infrastructure deployments • Enable efficient data routing, parsing, and filtering • Apply data warehousing, real-time data processing, and data normalization concepts • Collect, analyze, and correlate logs using SIEM and data management platforms • Lead SIEM detection engineering by developing and fine-tuning correlation rules, alerts, and dashboards • Expand data engineering practices using advanced analytics and machine learning for proactive threat detection • Participate in the purple team lifecycle with offensive and defensive security teams • Automate SIEM and data management operations • Collaborate with cross-functional teams to mitigate security risks and vulnerabilities • Audit security configurations, policies, and procedures for compliance • Monitor current security trends, tools, and best practices • Provide guidance and support to security engineers • Perform operational on-call support and ad hoc duties outside normal work hours as required

🎯 Requirements

• Extensive experience with SIEM and data management platforms, particularly Splunk and Cribl, including deployment, configuration, optimization, administration, and functional use • Experience with Cribl onboarding using REST API, S3 collectors, HEC, and related tooling • Strong understanding of network protocols, firewalls, intrusion detection systems, endpoint security solutions, and Azure, AWS, and GCP • Demonstrated ability to deploy, configure, and secure infrastructure in Azure, AWS, and GCP • Proficiency in Python, PowerShell, or Bash; AWS Lambda and Azure Functions experience is a plus • Strong understanding of MITRE ATT&CK • Hands-on experience developing, tuning, and deploying SIEM security detections • Excellent analytical skills for complex engineering issues • Knowledge of COBIT, NIST 800-53, ISO27001, SSAE16, SOC1, and SOC2 • Proficiency in Microsoft Word, Excel, PowerPoint, and Visio • Strong verbal, written, and presentation skills • Ability to manage multiple high-priority projects and tasks • Ability to work collaboratively in a team-oriented environment • Generally requires a bachelor’s degree in computer science, Information Technology, Cybersecurity, or related field, or equivalent work experience • Minimum of 10 years’ information security experience, focused on SIEM, data management, and security operations • Relevant certifications such as Splunk Certified Power User/Admin, Cribl Certified Admin, Security+, CEH, OSCP, or CISSP • Experience using Cursor, ChatGPT, or similar AI platforms is good to have • Familiarity with Azure DevOps is good to have • Familiarity with APIs, syslog, forwarders, cloud integrations, and security or observability data sources • Experience with IT service management, change management, and vulnerability remediation workflows • Familiarity with cloud platforms, containers, or infrastructure-as-code

🏖️ Benefits

• Equal Opportunity Employer • Inclusive workplace committed to respecting, supporting, and inspiring all individuals • Diversity and inclusion practices • Potential operational on-call support based on business needs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume