SIEM + Catalyst Integration Enginee...

About the Role

We are seeking an experienced SIEM + Catalyst Integration Engineer to join our team in Pune for a long-term contract. This hybrid role requires deep expertise in integrating Cisco Catalyst Center telemetry with Splunk and other SIEM platforms.

Core Responsibilities:

• Integrate network logs, events from Cisco Catalyst Center into Splunk or equivalent SIEM environments.
• Build and maintain API-driven integrations using REST APIs, webhooks, and OAuth protocols.
• Perform data transformation and normalization to ensure clean, actionable data flows between systems.
• Enable robust data ingestion via APIs, syslog, and streaming pipelines.
• Cross-functionally collaborate with SOC, NOC, and service teams to enhance incident response efficiency.
• Optimize alert quality and reduce noise within SIEM environments.
• Contribute to security monitoring, compliance initiatives, and observability projects.

Must-Have Skills:

• Hands-on Splunk experience: Including log ingestion, integration workflows, and alert configuration (familiarity with other SIEM tools is a plus).
• Cisco Catalyst Center expertise: Deep knowledge of APIs, assurance data, and automation capabilities.
• Proficiency in REST APIs, webhooks, OAuth, and complex data transformation tasks.
• Experience handling network telemetry, syslog messages, and high-volume streaming data.
• A hybrid background spanning both network engineering and security operations (SecOps).
• Strong ability to collaborate across diverse teams including SOC, NOC, and service desk units.

Nice-to-Have Skills:

• Familiarity with compliance frameworks and established security monitoring standards.
• Experience designing reusable automation workflows for operational efficiency.
• Solid understanding of network architecture to effectively contextualize telemetry data within broader infrastructure contexts.