SIEM Integration Engineer
Job Description
We are looking for a SIEM Integration Engineer, for a fully remote and full time job. As an SIEM Integration Engineer, you will be instrumental in enhancing the integration capabilities of data produced from network detection and response sensors exported into Security Information and Event Management (SIEM) systems like Elastic, LogScale and Google Chronicle. You will be working on the forefront of SIEM technology, focusing on the migration of dashboards, workflows, and applications from Splunk into comparable SIEM technologies.
Key Responsibilities:
● Taking existing dashboards developed in Splunk, migrate them into other SIEM platforms, with a focus on Elastic, LogScale, Microsoft Sentinel and Google Chronicle.
● Engage with SIEM engineers, ensuring seamless operation and enhanced user experience of ported dashboards.
● Maintain up-to-date knowledge of SIEM technologies and industry best practices to ensure the delivery of cutting-edge solutions.
● Provide technical guidance and support to SIEM engineering staff for integration-related issues.
Minimum Qualifications:
● Bachelor’s degree in Computer Science or a related technical field, or equivalent practical experience.
● Proven experience in SIEM integration, preferably with Elastic, LogScale, Microsoft Sentinel and Google Chronicle with knowledge of Splunk.
● Strong development skills, with experience in languages and tools supported by SIEM (e.g., Java, Python, Splunk Query Language).
● Solid understanding of data visualization and the creation of interactive dashboards.
● Familiarity with networking and security concepts, including IDS, NSM, and cybersecurity attack techniques.
● Experience with common security workflows and processes (IR, threat hunting), especially related to network traffic + detection
● Knowledge of the security application and technology integration landscape across a variety of technologies including SIEM, XDR, and SOAR
● Excellent problem-solving abilities and a strong customer focus.
● Strong communication skills and the ability to work effectively in a team environment.
Preferred Qualifications:
● Advanced knowledge of SIEM systems and their deployment in large-scale environments.
● Experience with other SIEM platforms like Elasticsearch, LogRhythm, LogScale, or QRadar.
● Familiarity with cloud technologies and services, particularly those related to data processing and analytics.
● Prior experience in a cybersecurity company or a similar high-tech environment.
● Experience with Agile development methodologies and working with distributed teams.
Job Benefits:
● Full work from home (5 days a week)
● Private Medical Insurance.
● Educational aids and paid subscriptions, certifications and exams.
● Schedule flexibility.
● Career Growth.
● Recreational Company Activities.
● Free nutritionist for all employees.
