Senior Engineer – SIEM Platform Engineering & Operations
Core
Engineering, monitoring, and optimizing the firm's SIEM ecosystem (Splunk, Microsoft Sentinel) to ensure data quality, platform resiliency, and analytic reliability.
Role type
Senior IC SIEM Platform Engineer & Operations
Builds
Production SIEM platforms, data ingestion pipelines, and unified observability dashboards
Domain
Cyber Security / Security Operations / Data Engineering
Deliverable
production ML models | product features | dashboards & analysis
Required skills
Splunk Enterprise/Cloud, Microsoft Sentinel, Kafka, Cribl, Python, SQL, CIM/OCSF/CEF normalization, SRE patterns (SLIs/SLOs), threat detection engineering
Preferred skills
Offensive security tooling, data science processes, cloud threat hunting (Azure/AWS/M365), Splunk KV stores/app management, AI-enabled security operations
Technologies
Splunk, Microsoft Sentinel, Kafka, Cribl, Databricks, Hadoop, Python, SQL, Pandas, Spark, Anvilogic
Responsibilities
Engineer and maintain SIEM platform health and resiliency; monitor and troubleshoot data ingestion pipelines; develop dashboards for throughput and data quality; enforce data SLIs/SLOs; manage Anvilogic content platform; write and optimize query languages (SPL, KQL); support Model Risk Management efforts
Seniority
Senior, hands-on IC
