Analyst, SIEM, Information Security
Core
Supporting SIEM and forensics operations by maintaining log ingestion pipelines, developing parsers, and normalizing data for security detection.
Role type
Analyst, SIEM Data Engineering
Builds
Log ingestion pipelines and normalized data structures for SIEM platforms
Domain
Information Security / SIEM Engineering
Deliverable
production ML models | product features | dashboards & analysis | infrastructure
Required skills
SIEM management, parser development, log normalization, data source onboarding, data quality monitoring, log volume/routing policies, troubleshooting data ingestion
Preferred skills
Security data pipeline solutions, forensics operations, scripting, security certifications
Technologies
Splunk, Qradar, Cribl, bindplane, databahn, regex, Grok, CEF/LEEF, OCSF, ECS, rsyslog, syslog-ng, Fluentd, Fluent Bit, NXLog
Responsibilities
Maintain and operate log ingestion pipelines from cloud, on-prem, and SaaS sources; Develop and tune field extraction rules, parsers, and normalization logic; Assist with onboarding new data sources including connector configuration and schema mapping; Monitor and improve data quality, completeness, and field consistency; Apply log volume and data routing policies for cost optimization and pipeline health; Troubleshoot data ingestion, parsing, and normalization issues
Seniority
Mid-level, hands-on IC