Senior Administrator - ELK - Elastic Search, Windows PowerShell
India
Apply now
Job Description
Senior Administrator - ELK - Elastic Search, Windows PowerShell
Others, Karnataka

Job Summary

Security Specialist ElasticSearch / Elastic SIEM

Key Responsibilities Monitor alerts in Elastic Security and perform initial triage, prioritization, investigation, and escalation. Use Kibana Discover, dashboards, timelines, cases, KQL, Lucene, DSL/EQL queries to analyze suspicious activity. Review endpoint, network, firewall, proxy, DNS, VPN, cloud, identity, SAP and non-SAP application logs. Support detection rule testing, validation, tuning, and false-positive reduction with E4 / engineering teams. Document investigation steps, evidence, impact, severity, actions taken, and escalation notes in ticketing tools. Support onboarding validation for new log sources, including parsing checks, event quality, field mapping, and use-case readiness. Perform shift handovers, knowledge sharing, SOP updates, and maintain time-stamped audit-ready records. Contribute to monthly KPI/SLA reporting through accurate case updates, alert quality feedback, and service metrics. Escalate confirmed or suspicious events to Incident Response with clear technical summary and recommended next steps
Certifications Preferred \\\\r\\\\n Elastic Certified Analyst, CompTIA CySA+, Security+, Certified SOC Analyst, GCIH, CEH, \\\\r\\\\nMicrosoft SC-200, AWS/Azure/GCP Security certifications. .

 

Key Responsibilities

Key Responsibilities Monitor alerts in Elastic Security and perform initial triage, prioritization, investigation, and escalation. Use Kibana Discover, dashboards, timelines, cases, KQL, Lucene, DSL/EQL queries to analyze suspicious activity. Review endpoint, network, firewall, proxy, DNS, VPN, cloud, identity, SAP and non-SAP application logs. Support detection rule testing, validation, tuning, and false-positive reduction with E4 / engineering teams. Document investigation steps, evidence, impact, severity, actions taken, and escalation notes in ticketing tools. Support onboarding validation for new log sources, including parsing checks, event quality, field mapping, and use-case readiness. Perform shift handovers, knowledge sharing, SOP updates, and maintain time-stamped audit-ready records. Contribute to monthly KPI/SLA reporting through accurate case updates, alert quality feedback, and service metrics. Escalate confirmed or suspicious events to Incident Response with clear technical summary and recommended next steps.

 

Skill Requirements

 Elastic Security : ElasticSearch, Kibana, Elastic Security alerts, timelines, cases, Discover, dashboards Query / Analysis : KQL, Lucene, basic ElasticSearch DSL/EQL, event correlation, log search and filtering SOC Operations : Alert triage, prioritization, escalation, investigation notes, false-positive analysis, shift handover Log Sources : Endpoint, Windows/Linux, firewall, proxy, DNS, VPN, web/app, cloud, identity, SAP and non-SAP logs Ticketing : ServiceNow, Jira, incident/task documentation, SOP-based execution Security Knowledge : MITRE ATT&CK; basics, NIST/ISO awareness, network fundamentals: TCP/IP, DNS, HTTP/S, VPN, proxies

Other Requirements

Preferred Skills Splunk / SAP Enterprise Threat Detection / Microsoft Sentinel exposure. EDR tools: CrowdStrike, SentinelOne, Microsoft Defender for Endpoint, Carbon Black. Threat intelligence: MISP, ThreatConnect, Anomali. Wireshark, Zeek/Bro, cloud security monitoring across AWS/Azure/GCP. Python, PowerShell, Bash basics for log parsing or repetitive investigation tasks. Basic malware/forensics awareness using Volatility, FTK, or Autopsy
Apply now
Information at a Glance

Why HCLTech?

At HCLTech, you'll supercharge your potential. You'll find your career. And you'll find your spark. All at a place that knows that helping its customers stay on top starts by putting its people first.

HCLTech is a global technology company, home to more than 227,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending March 2026 totaled $14.7 billion.