Cybersecurity Engineer II | SIEM and EDR (Remote)
Core
Design, implement, and optimize security monitoring and endpoint detection capabilities to enhance threat detection and response posture.
Role type
Cybersecurity Engineer II (SIEM/EDR)
Builds
Security monitoring infrastructure, detection use cases, automation logic, and dashboards
Domain
Cybersecurity, SIEM, EDR
Deliverable
production ML models | product features | dashboards & analysis
Required skills
SIEM/EDR platform expertise, networking infrastructure concepts, log analysis, regex, incident investigation, dashboard configuration
Preferred skills
Security+ certification, Incident Response experience, cloud solutions experience, Linux/Unix administration
Technologies
Cortex XSIAM, Splunk, CrowdStrike, Azure, GCP, Linux/Unix
Responsibilities
Maintain operational health of EDR and SIEM infrastructure, tune security use cases for high fidelity alerts, develop custom detection rules and log correlations, configure dashboards and reporting, troubleshoot service disruptions, validate event data extraction and parsing
Seniority
Mid-level, hands-on IC
