The Senior SIEM Engineer joins the Corporate Information Security team to engineer, sustain, and improve cybersecurity monitoring platforms for enterprise-wide threat detection and investigations. The role involves monitoring the operational health of log data pipelines and SIEM platforms to ensure data is parsed and normalized for security operations. Key responsibilities include researching and implementing solution upgrades to expand visibility, designing for scale, and collaborating with infrastructure and security peers. Candidates must possess experience with platforms like CrowdStrike Next-Gen SIEM, Splunk, Microsoft Sentinel, Palo Alto XSIAM, Google SecOps, Humio, and Elastic. Technical skills include managing data pipelines using Cribl, Databahn, Bindplane, or Vector across AWS, Azure, and GCP. Preferred skills include Python, Bash, PowerShell, Infrastructure as Code, regular expressions, and Linux administration.
Engineer, sustain, and improve cybersecurity monitoring platforms for enterprise-wide threat detection.
Monitor the operational health of log data pipelines, SIEM platforms, and infrastructure.
Ensure data is correctly parsed and normalized to support security investigations.
Research and implement SIEM solution upgrades to expand enterprise-wide cybersecurity visibility.
Maintain supporting components to ensure a secure and performant security environment.
Develop and integrate solutions across AWS, Azure, and Google Cloud Platform environments.
Create and maintain operating procedures, logical flow diagrams, and technical documentation.
What we're looking for
5+ years of experience deploying, administering, maintaining, and optimizing enterprise log data pipelines and SIEM solutions in complex enterprise environments.
Hands-on experience administering platforms including CrowdStrike Next-Gen SIEM, Splunk, Microsoft Sentinel, Palo Alto XSIAM, Google SecOps, Humio, Elastic, or similar.
Proven expertise implementing and integrating enterprise log data pipeline solutions such as Cribl, Databahn, Bindplane, Vector, or comparable platforms.
Demonstrated experience developing solutions and integrations across AWS, Microsoft Azure, and Google Cloud Platform.
Strong documentation and communication skills to create operating procedures, logical flow diagrams, and formal technical reports.
Programming or scripting language expertise including Python, Bash, or PowerShell (preferred).
Experience automating deployments using scripts or Infrastructure as Code (IaC) methodologies (preferred).
Proficiency leveraging regular expressions for parsing and pattern matching (preferred).
Experience administering applications deployed on Linux/UNIX operating systems (preferred).
AWS
Azure
Linux
Windows Server
SQL Server
RedHat KVM
VMware ESXi
Microsoft Hyper-V
Cisco IOS
Fortinet FortiGate
Active Directory
SIP
SBC
API
Virtualization
SaaS
Hybrid Cloud