Senior SIEM Engineer
Job Summary
As a Senior SIEM Engineer, you will serve as a technical leader and subject matter expert responsible for designing, deploying, and optimizing global SIEM and UEBA platforms. You will develop advanced threat detection strategies and automated log collection systems across hybrid and multi-cloud environments. Additionally, you will mentor junior engineers and collaborate with SOC and incident response teams to mature security analytics and operations.
Responsibilities
- Architect and maintain SIEM and UEBA platforms
- Develop automated threat detection and analytics
- Lead log collection and correlation strategies
- Mentor junior engineers and promote best practices
- Collaborate on incident response and security monitoring
Required Skills
- Expertise in SIEM/UEBA tools (Splunk, Sentinel, etc.)
- Scripting proficiency (Python, PowerShell, Bash)
- Cloud security experience (AWS, Azure, GCP)
- Knowledge of MITRE ATT&CK and NIST frameworks
- Strong threat hunting and analytics capabilities
Job Details
### Core Responsibilities
- Lead the architecture, deployment, and continuous improvement of SIEM and UEBA platforms.
- Build robust log collection and correlation strategies across on-prem, hybrid, and multi-cloud environments to ensure full visibility.
- Develop and optimize custom detection rules, dashboards, and analytics to identify advanced threats and minimize false positives.
- Guide and mentor junior engineers, promoting automation, best practices, and high-quality engineering standards.
- Partner with SOC, Threat Intelligence, and Incident Response teams to design advanced detection analytics and improve response capabilities.
- Integrate new log sources and ensure scalability in alignment with security architecture.
- Automate repetitive workflows using scripting (Python, PowerShell, Bash, REST APIs).
- Support incident investigations using SIEM data to accelerate containment and remediation.
- Collaborate with infrastructure and application teams to strengthen logging, monitoring, and compliance.
- Manage vendor relationships, platform health, upgrades, audits, and SIEM lifecycle processes.
- Contribute to long-term security monitoring strategy and innovation pipeline.
### Qualifications
- A solid educational background in IT or a related field (Master's, Bachelor's with relevant experience).
- Hands-on experience working with SIEM and UEBA platforms.
- Strong understanding of threat detection, log management, and modern security analytics.
- Experience designing or improving security monitoring and automation solutions.
- Familiarity with well-known cybersecurity frameworks like NIST CSF, MITRE ATT&CK, or ISO 27001.
- Practical experience with leading SIEM tools (e.g., Splunk, QRadar, ArcSight, Sentinel) and log pipelines.
- Exposure to cloud environments (AWS, Azure, GCP), threat hunting, or SOAR automation.
- Ability to script in Python, PowerShell, or Bash to simplify and improve workflows.
- Professional security certifications (e.g., GCDA, GCIH, GCIA, CISSP, CISM, Security+, cloud certs) are a strong plus.
- Strong communication, teamwork, problem-solving, and the ability to work effectively in global teams.