SIEM Data Engineer, Assistant Vice President
Core
Build and maintain security telemetry pipelines to onboard, transform, validate, and route enterprise log data into SIEM and analytics platforms for threat detection and incident response.
Role type
Senior IC SIEM Data Engineer
Builds
Security telemetry pipelines feeding Splunk, Databricks, and other cyber analytics platforms
Domain
Cybersecurity / Data Engineering
Deliverable
production ML models | product features | dashboards & analysis
Required skills
SIEM data onboarding, log ingestion, data routing, parsing, enrichment, validation, troubleshooting, Splunk, Cribl Stream, Databricks, SPL, SQL, Spark SQL, Python, Shell, PowerShell
Preferred skills
Cribl certifications, Splunk certifications, cloud-native ingestion services, data lakehouse concepts
Technologies
Splunk, Databricks, Cribl Stream, Fluent Bit, Fluentd, Vector, Kafka, Syslog, HEC, REST APIs
Responsibilities
Configure telemetry pipelines for parsing, filtering, masking, enrichment, normalization, and routing; Validate data quality in Splunk and Databricks; Troubleshoot ingestion and data flow issues across sources and platforms; Monitor pipeline health, dropped events, and ingestion latency; Document onboarding patterns, field mappings, and transformation logic.
Seniority
Senior, hands-on IC