Cybersecurity Engineer, SIEM

Requirements

• 5+ years of experience in Site Reliability Engineering (SRE), Data Engineering, or Security Engineering with a focus on logging infrastructure.
• Deep understanding of log management challenges at scale (indexing strategies, sharding, partitioning, throughput tuning).
• Strong experience deploying and monitoring stateful workloads on Kubernetes and Cloud providers (Azure/GCP) and On-Prem.
• Ability to write production-grade Python or Go for automation and custom log exporters.
• Experience managing monitoring, alerting, and on-call rotations for critical infrastructure.

What you'll be doing

• Own the set-up, lifecycle, availability, and performance of the SIEM solution, ensuring 99.9% uptime for log ingestion and query availability.
• Design and maintain high-throughput data pipelines to collect, buffer, and transport logs from distributed systems to the SIEM.
• Implement parsing logic and schema standardization to ensure unstructured logs are searchable and actionable for analysts.
• Manage alert rules, connectors, and dashboard configurations, avoiding manual console configuration ("ClickOps").
• Analyze ingestion patterns to identify noisy, low-value data. Implement filtering and aggregation at the source to maximize signal-to-noise ratio.
• Architect data tiers to balance query performance with compliance retention requirements and cloud costs.

Nice to Haves

Perks and Benefits