SIEM Platform Engineer

What you'll do

• Design data pipeline architectures for security operations.
• Aggregate logs from various systems into a single common schema using ECS.
• Create quality visualizations and alerts for threat hunting and problem identification.
• Maintain and troubleshoot Elastic Stack, Logstash, Elasticsearch, Kibana, and Beats.
• Deploy SIEM platforms across cloud, on-premises, and disconnected environments.
• Work with vendors to determine best practices for system architecture deployment.

What we're looking for

• 1+ years of experience with SIEM platforms like Splunk Enterprise Security, Elastic Security, Kibana, Sentinel, or Chronicle.
• Experience designing data pipeline architectures for security operations and deploying platforms across cloud, on-premises, and disconnected environments.
• Proficiency in the Elastic Stack including Logstash, Elasticsearch, Kibana, Beats, and Index Lifecycle Management (ILM).
• Knowledge of EDR, NDR solutions, and full-packet capture tools such as CrowdStrike, Corelight, or Trellix.
• TS/SCI clearance required.