Senior Associate SIEM Implementation
Core
Lead technical deliverables for SIEM implementation and operations, including log ingestion, use case development, and SOAR workflow implementation for client security operations.
Role type
Senior IC cybersecurity engineer (SIEM/SOAR)
Builds
Production SIEM platforms (Microsoft Sentinel, Google SecOps, Palo Alto XSIAM, Devo) and automated detection workflows
Domain
Cybersecurity & Privacy
Required skills
SIEM architecture, log management, threat detection, Python, PowerShell, Bash, cloud platforms (Azure, GCP, AWS), data pipelines, SOAR platforms, CI/CD practices
Preferred skills
AI concepts for security, consulting/client delivery experience, specific SIEM certifications
Technologies
Microsoft Sentinel, Google SecOps, Palo Alto XSIAM, Devo, Splunk, Logic Apps, Phantom, Demisto, XSOAR, GitHub, Cribl, DataBahn
Responsibilities
Lead technical deliverables for SIEM implementation and operations; Perform PoC/PoV engagements; Conduct SIEM assessments; Develop and maintain data pipelines for log ingestion; Integrate log sources using connectors and scripts; Build use cases aligned with NIST/MITRE ATT&CK; Implement detection rules using SPL/KQL; Develop dashboards and alerts; Implement SOAR workflows; Perform health checks and tuning; Create and maintain documentation; Collaborate with cross-functional teams; Deploy SIEM content through CI/CD pipelines; Develop custom integrations; Apply AI capabilities in security-focused manner
Seniority
Senior, hands-on IC
