Security Data & SIEM Engineer
Core
Design, tune, and operate security logging and SIEM capabilities to support threat detection, investigation, and response across cloud and enterprise environments.
Role type
Senior IC security data & SIEM engineer
Builds
Security telemetry pipelines, detection rules, alerts, and integrations with operational workflows
Domain
Cybersecurity, Security Operations (SecOps), Cloud Security
Required skills
SIEM platforms (Splunk, QRadar, ArcSight, Logscale), log management, detection engineering, alert tuning, security event analysis, vulnerability management tools, endpoint protection solutions, CSPM tools, ticketing workflows (ServiceNow, Jira)
Preferred skills
Python or PowerShell scripting, Kubernetes security, cloud infrastructure security, SOAR or automation workflows, Linux/Windows/macOS security data sources
Technologies
Splunk, QRadar, ArcSight, Logscale, Qualys, Tenable.io, Rapid7, CrowdStrike, Carbon Black, SentinelOne, Palo Alto Prisma, Sophos Cloud Optix, ServiceNow, Jira
Responsibilities
Configure and maintain SIEM content including log sources, parsing, correlation rules, dashboards, alerts, and reports; Ingest and normalize security events from cloud, endpoint, network, identity, and application sources; Tune detections to reduce noise and improve signal quality; Integrate security alerts and workflows with ticketing tools; Partner with threat detection and incident response teams to investigate events; Monitor tool health and data quality; Mentor team members on SIEM engineering and data analysis
Seniority
Senior, hands-on IC
