Operations Support Engineer – R1
2-4 years of experience in security monitoring, alert triage, initial investigation and incident
classification across the SOC environment. The engineer will primarily operate OpenText ArcSight,
OpenText ArcSight SOAR, OpenText NetIQ and OpenText PAM, perform first-level troubleshooting,
analyze security events and logs, execute defined SOAR playbooks/SOPs, manage incidents and
escalate complex issues to L2.
Skills: SIEM Monitoring • Security Event Analysis • Alert Triage • Log Analysis • Incident Classification •
SOAR Playbook Execution • IAM/PAM Monitoring • AD/LDAP • Syslog • Windows/Linux Logs • TCP/IP
- DNS • Basic Threat Analysis • IOC • MITRE ATT&CK • ITSM • Incident Escalation
Skill Required: OpenText ArcSight • OpenText ArcSight SOAR • OpenText NetIQ • OpenText PAM
Alternate: SIEM: IBM QRadar, Microsoft Sentinel, Palo Alto Cortex XSIAM, SOAR: Splunk SOAR, Palo
Alto Cortex XSOAR, Swimlane, Turbine, IDAM: SailPoint, Saviynt, One Identity, Oracle IGA, Microsoft
Entra, PAM: CyberArk, BeyondTrust, ARCON
Location: Pune, Delhi, Bangalore and across Pan India.
Education: Diploma / B. Tech
Operations Support Engineer – R2
4-6 years of experience advanced security event investigation, application/platform troubleshooting
and incident analysis across the SOC environment. The senior engineer will provide advanced
support for OpenText ArcSight, OpenText ArcSight SOAR, OpenText NetIQ and OpenText PAM,
including log ingestion, parsing, correlation rules, SOAR playbooks, identity and privileged-access
issues, integrations and security incidents.
Skills: SIEM Troubleshooting • Log Ingestion • Parsing/Normalization • Correlation Rules • Detection
Engineering • SOAR Playbooks • API Integration • Identity Lifecycle • PAM Troubleshooting •
AD/LDAP • Threat Investigation • Threat Intelligence • MITRE ATT&CK • Linux/Windows • Network
Security • Python/PowerShell • Advanced RCA
Skills Preferred but not mandatory: OpenText ArcSight • OpenText ArcSight SOAR • OpenText NetIQ - OpenText PAM
Alternate:
SIEM: IBM QRadar, Microsoft Sentinel, Palo Alto Cortex XSIAM
SOAR: Splunk SOAR, Palo Alto Cortex XSOAR, Swimlane, Turbine
IDAM: SailPoint, Saviynt, One Identity, Oracle IGA, Microsoft Entra
PAM: CyberArk, BeyondTrust, ARCON
Location: Pune, Delhi, Bangalore and across Pan India.
Education: Diploma / B. Tech
