Senior SIEM Data Engineer
Core
Design, build, and maintain scalable SIEM and security telemetry pipelines to onboard, transform, and validate enterprise log data for security monitoring, analytics, and incident response.
Role type
Senior IC data engineer (cybersecurity telemetry)
Builds
Security telemetry pipelines and data layers for Splunk, Databricks, and other cyber analytics platforms
Domain
Cybersecurity data engineering, SIEM, log analytics
Required skills
SIEM data onboarding, security telemetry pipelines, log ingestion, routing, parsing, enrichment, validation, troubleshooting, Splunk, Cribl Stream, Databricks, data quality concepts, data engineering concepts, SIEM taxonomy, CIM/ECS alignment
Preferred skills
None stated
Technologies
Splunk, Databricks, Cribl Stream
Responsibilities
Design scalable SIEM and security telemetry pipelines across hybrid and multi-cloud environments; Lead onboarding of security telemetry from diverse enterprise sources; Analyze source log formats and define onboarding requirements; Build and optimize telemetry pipelines for parsing, filtering, masking, enrichment, normalization, and routing; Deliver reliable security telemetry to Splunk and Databricks; Validate data quality across cyber data platforms; Establish SIEM onboarding standards; Optimize telemetry pipelines to reduce noise and improve performance; Lead troubleshooting of complex ingestion and data flow issues; Automate deployment and monitoring using CI/CD and infrastructure-as-code; Mentor engineers and promote best practices
Seniority
Senior, hands-on IC
