METRO
Senior SOC Engineer
Kharadi, Maharashtra, India · On-site · Full-time
Apply on the employer’s site ↗See how well you match this job
You apply directly with the employer. ROLIVA does not submit applications from this page and is not the employer.
About the role
Description from the employer’s posting. Check the employer’s page for the current version.
- EmployerMETRO
- LocationKharadi, Maharashtra, 411014, India
- Work styleOn-site
- Employment typeFull-time
- Employer posted
●As a Senior SOC Engineer as part of the Cyber Defense Operations Center (CDOC) you will work in the Detection and Response Engineering team with a focus on XDR, SIEM and SOAR technologies. You’ll be responsible for helping the SOC Specialist in integrating log sources, reviewing and developing use cases and response playbooks.
●This role requires in-depth knowledge of custom parsing, python scripting, REGEX, API Integration and playbook creation, hence also experienced Software Developers or similar hands-on roles are welcomed to apply
Qualification:
●Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
●4-7 years of total experience in SecOps/DevOps , in a large multi-national organization or in a known MSSP. In addition, candidate should posses at least 3 years of working experience automation, integration and custom parser creation for SecOps/DevOps tools like SIEM, SOAR or ITSM tool.
Show full description
●Lateral joiners from other hands-on information technology roles are highly welcomed to apply!
Experience
●Design and build custom parsers for diverse log formats, threat feeds, and telemetry sources.
●Develop integration guides for connecting security tools with external systems (e.g., cloud platforms, identity providers, ticketing systems).
●Write technical documentation for parser configuration, schema mapping, normalization, and enrichment workflows.
●Test and validate parser outputs to ensure accurate data extraction and ingestion.
●Continuously improve SIEM/SOAR/XDR alert use cases and detection logic.
●Create tutorials and walkthroughs for parser development using Python, Regex, and AI prompts.
●Collaborate with the overall Cyber Defense team to capture use cases, edge cases, and operational needs.
●Maintain integration documentation for REST APIs, webhooks, and SDKs across security platforms.
Technical & Soft Skills:
●Proven experience in technical writing and content creation for security products.
●Hands-on expertise in log parsing, data normalization, and custom parser development.
●Proficient with SIEM platforms, log formats (JSON, Syslog, XML), and parsing tools (Regex, Logstash) an AI prompting.
●Skilled in REST APIs, JSON schemas, and integration workflows.
●Familiar with cloud-native security tools (AWS GuardDuty, Azure Sentinel, Google Chronicle).
●Competent in using Git, Markdown, and documentation platforms (e.g., Confluence, DITA).
●Strong ability to translate complex technical concepts into clear, actionable content.
●Experienced in producing executive summaries and detailed technical SOPs.
●Effective team collaborator with strong communication skills.
Check your resume against this job Free, no sign-up. Nothing you paste is stored.
Staying safe while you apply
- Never pay to apply, interview or accept an offer. ROLIVA never asks you for payment to apply to a job.
- Apply only through the official “Apply on the employer’s site” button, on the employer’s own site, and check that a recruiter’s email uses that employer’s own domain rather than a free email address.
- Be cautious of an offer made with no real interview, or pressure to decide quickly or share financial details early.
Does something look wrong with this listing? Use “Report broken link” in the role details, or read ROLIVA’s full job-safety guidance ↗.
Preparing for this role with ROLIVA
- Check the fit.
Compare the requirements with the experience you have confirmed, including gaps.
- Prepare honestly.
Build interview stories and application drafts from your own evidence.
- Keep track.
Save the role and record your own application status and follow-ups.
At a glance
- Work styleOn-site
- Employment typeFull-time
- SeniorityMid level
- Employer posted
- Added to ROLIVA
- Last checked
Skills in this posting
Skills ROLIVA found in the employer’s own description above. A mention is not a requirement.