Job Descriptions:
Operations Support Engineer – R1
2-4 years of experience in security monitoring, alert triage, initial investigation and incident
classification across the SOC environment. The engineer will primarily operate OpenText ArcSight,
OpenText ArcSight SOAR, OpenText NetIQ and OpenText PAM, perform first-level troubleshooting,
analyze security events and logs, execute defined SOAR playbooks/SOPs, manage incidents and
escalate complex issues to L2.
Skills: SIEM Monitoring • Security Event Analysis • Alert Triage • Log Analysis • Incident Classification •
SOAR Playbook Execution • IAM/PAM Monitoring • AD/LDAP • Syslog • Windows/Linux Logs • TCP/IP
- DNS • Basic Threat Analysis • IOC • MITRE ATT&CK • ITSM • Incident Escalation
Skill Required: OpenText ArcSight • OpenText ArcSight SOAR • OpenText NetIQ • OpenText PAM
Alternate: SIEM: IBM QRadar, Microsoft Sentinel, Palo Alto Cortex XSIAM, SOAR: Splunk SOAR, Palo
Alto Cortex XSOAR, Swimlane, Turbine, IDAM: SailPoint, Saviynt, One Identity, Oracle IGA, Microsoft
Entra, PAM: CyberArk, BeyondTrust, ARCON
Location: Pune, Delhi, Bangalore and across Pan India.
Education: Diploma / B. Tech
Operations Support Engineer – R2
4-6 years of experience advanced security event investigation, application/platform troubleshooting
and incident analysis across the SOC environment. The senior engineer will provide advanced
support for OpenText ArcSight, OpenText ArcSight SOAR, OpenText NetIQ and OpenText PAM,
including log ingestion, parsing, correlation rules, SOAR playbooks, identity and privileged-access
issues, integrations and security incidents.
Skills: SIEM Troubleshooting • Log Ingestion • Parsing/Normalization • Correlation Rules • Detection
Engineering • SOAR Playbooks • API Integration • Identity Lifecycle • PAM Troubleshooting •
AD/LDAP • Threat Investigation • Threat Intelligence • MITRE ATT&CK • Linux/Windows • Network
Security • Python/PowerShell • Advanced RCA
Skills Preferred but not mandatory: OpenText ArcSight • OpenText ArcSight SOAR • OpenText NetIQ - OpenText PAM
Alternate:
SIEM: IBM QRadar, Microsoft Sentinel, Palo Alto Cortex XSIAM
SOAR: Splunk SOAR, Palo Alto Cortex XSOAR, Swimlane, Turbine
IDAM: SailPoint, Saviynt, One Identity, Oracle IGA, Microsoft Entra
PAM: CyberArk, BeyondTrust, ARCON
Location: Pune, Delhi, Bangalore and across Pan India.
Education: Diploma / B. Tech
Sr. Support Engineer – R3
8-12 years of experience in advanced technical support, architecture, engineering and complex RCA
across the SOC security platforms. The SME will provide expert-level support for OpenText ArcSight,
OpenText ArcSight SOAR, OpenText NetIQ and OpenText PAM, covering SIEM/SOAR/IDAM/PAM
architecture, detection engineering, correlation and parser development, threat hunting, security
automation, integrations, performance, HA/DR and major incident support. Strong expertise in the
identified alternate technologies is desirable to support technology transition, integration and future
platform modernization.
Skill Preferred but not mandatory: OpenText ArcSight • OpenText ArcSight SOAR • OpenText NetIQ •
OpenText PAM
Alternate Skill: SIEM: IBM QRadar, Microsoft Sentinel, Palo Alto Cortex XSIAM
SOAR: Splunk SOAR, Palo Alto Cortex XSOAR, Swimlane, Turbine
IDAM: SailPoint, Saviynt, One Identity, Oracle IGA, Microsoft Entra
PAM: CyberArk, BeyondTrust, ARCON
Location: Pune, Delhi, Bangalore and across Pan India.
Education: Diploma / B. Tech
Operations Support SME – R4
8-12 years of experience in providing expert guidance to L1–L3, lead critical RCA, coordinate OEM
escalations and ensure resolution of complex and recurring issues. The Resident engineer shall be at
least CISSP certified. Working Knowledge of HSM (Hardware Security Module)
Skill: Provide L4/OEM-level technical support for SOC platforms. Own resolution of critical and
recurring incidents escalated from L3 and perform deep-dive RCA and problem management.
Review SOC architecture and provide technical recommendations. Manage capacity, performance,
HA/DR and resilience issues. Maintain OEM support contracts/escalation channels and technical
contacts. Provide knowledge transfer to L1/L2/L3 teams. Maintain technical documentation, RCA
reports and known-error databases.
Skills: SIEM/SOAR/IDAM/PAM Architecture • Advanced RCA • Detection Engineering • Correlation
Development • Custom Parsers • Threat Hunting • Incident Response • Threat Intelligence • MITRE
ATT&CK • Security Automation • API Integration • Performance Tuning • HA/DR • Security
Engineering • Upgrade/Migration
Preferred but not mandatory: OpenText ArcSight • OpenText ArcSight SOAR • OpenText NetIQ •
OpenText PAM
Alternate: SIEM: IBM QRadar, Microsoft Sentinel, Palo Alto Cortex XSIAM
SOAR: Splunk SOAR, Palo Alto Cortex XSOAR, Swimlane, Turbine
IDAM: SailPoint, Saviynt, One Identity, Oracle IGA, Microsoft Entra
PAM: CyberArk, BeyondTrust, ARCON
Location: Pune, Delhi, Bangalore and across Pan India.
Education: Diploma / B. Tech
