SIEM Platform Engineer

Responsibilities

• Engineer, configure, maintain, and monitor the SIEM platform, collectors, connectors, and supporting infrastructure
• Onboard security-relevant logs from identity, endpoint, network, cloud, business applications, databases, and other environments
• Design reliable data pipelines; develop parsing, normalization, transformation, timestamp handling, and contextual enrichment
• Monitor telemetry health and resolve missing sources, ingestion delays, volume anomalies, schema changes, and connector failures
• Support detection engineering with required fields, correlation logic, threat intelligence, MITRE ATT&CK mapping, and testing
• Optimize ingestion, storage tiers, retention, query performance, licensing, and cost without reducing required security visibility
• Maintain architecture diagrams, log-source inventory, onboarding standards, runbooks, ownership, and configuration records
• Support SOC investigations, threat hunting, incident response, forensic data extraction, audits, and major incident resolution
• Coordinate logging requirements and remediation with IT, Cloud, Network, IAM, Application, OT, vendors, and service providers

Languages