SIEM and Data Management Engineer
New
A
AHEADManaged Security
United StatesFull-TimeMiddle
Salary120,000 - 160,000 USD per year
Apply NowOpens the employer's application page
Job Details
- Experience
- 2–4 years
- Required Skills
- PythonData engineering
Requirements
- 2–4 years of experience in Information Security, SIEM engineering, or security data engineering.
- Strong hands-on experience with Palo Alto Networks Cortex XSIAM (onboarding, pipeline management, parsing, normalization).
- Experience with Elastic Security and its components.
- Working knowledge of log collection techniques: API integrations, syslog, agent-based collection, and cloud connectors.
- Proficiency in developing/tuning parsers, field mappings, and regular expressions.
- Understanding of data lifecycle management, tiered storage, and retention strategies.
- Experience performing SIEM capacity planning and ingestion governance.
- Proficiency in Python or similar languages for automation and system integration.
- Familiarity with common security technologies (Firewalls, IDS, EDR, SOAR, IAM).
- Bachelor’s Degree in Computer Science, Information Security, Engineering, or equivalent experience.
- Preferred certifications: Palo Alto Networks, Elastic Certified Engineer, CISSP, GCIA, GCIH, or GMON.
Responsibilities
- Lead configuration and development for XSIAM data onboarding, ingestion, parsing, normalization, enrichment, and storage lifecycle management.
- Onboard client and internal data sources using APIs, syslog, agents, file-based collection, and cloud-native connectors.
- Develop and tune parsers, field extractions, and normalization logic to ensure telemetry usability.
- Partner with analysts and detection engineers to define log source requirements and maintain data standards.
- Optimize ingestion pipelines and storage strategies to ensure performance, scale, and retention compliance.
- Troubleshoot data collection, transport, parser, and indexing issues.
- Analyze data quality and health across sources to identify improvement opportunities.
- Build dashboards, reports, and health checks for performance and compliance monitoring.
- Create automation scripts in Python to streamline onboarding, validation, and platform administration.
- Participate in client-facing technical meetings to coordinate implementation and support.
View Full Description & ApplyYou'll be redirected to the employer's site
