Security Data & SIEM Engineer
Core
Operate, manage, and optimize enterprise security logging pipelines and SIEM platforms, focusing on Cribl Stream log processing and CrowdStrike NextGen SIEM data onboarding.
Role type
Senior IC security data engineer (SIEM & log stream processing)
Builds
Standardized security telemetry pipelines, optimized log ingestion routes, and integrated security data fabric for threat intelligence sharing.
Domain
Cybersecurity, Cloud Logging, SIEM Operations
Required skills
Cribl Stream (routes, pipelines, event breakers), enterprise SIEM platforms (CrowdStrike, Splunk, Azure Log Analytics), log source formats (Syslog, JSON, CEF), cloud logging infrastructure (Azure Event Hubs, AWS S3), scripting (Python, PowerShell, Bash), ITIL operational processes
Preferred skills
Cribl Stream certification, CrowdStrike Falcon LogScale certification, Log CIM standards, Security Data Fabric, SOAR workflows, ServiceNow/Jira dashboards
Technologies
Cribl Stream, CrowdStrike NextGen SIEM, Azure Event Hubs, AWS S3, Splunk, Humio, ServiceNow, Jira, Python, PowerShell, Bash, Syslog, JSON, CEF, NetFlow
