Cyber Engineer Architect - SIEM Security Architect
New
J
JobgetherCybersecurity
Ability to work remotely within the United StatesFull-TimeSenior
Salary170,144 - 201,250 USD per year
Apply NowOpens the employer's application page
Job Details
- Experience
- At least 10 years of relevant experience supporting complex IT cybersecurity infrastructure; at least five years of experience deploying and architecting distributed Splunk implementations.
Requirements
- Hold a bachelor's degree in Computer Engineering, Systems Engineering, or a related technical field.
- Have at least 10 years of relevant experience supporting complex IT cybersecurity infrastructure.
- Have at least five years of experience deploying and architecting distributed Splunk implementations.
- Have hands-on proficiency with Splunk Cloud, Splunk Enterprise Security (ES), Splunk SOAR, and Splunk User Behavior Analytics (UBA).
- Have experience designing and implementing SIEM solutions, IDS/IPS, web content filtering, network forensics, and firewall management.
- Have experience integrating SIEM and SOAR platforms with endpoint detection and response, network security tools, and IT service management or ticketing systems.
- Know network traffic monitoring, deep packet inspection, flow mapping, and visibility platforms such as Gigamon and ExtraHop.
- Have experience with secure remote access, cloud migration, load balancing, and distributed enterprise environments.
- Be familiar with NIST and FedRAMP frameworks, risk mitigation, and enterprise logging and monitoring requirements.
- Be able to investigate complex infrastructure issues, resolve technical incidents, and provide escalation support.
- Have technical communication skills and the ability to explain architectural concepts and mentor junior colleagues.
- Hold the required Splunk Certified Architect certification.
Responsibilities
- Design, architect, deploy, and maintain SIEM platforms, IDS/IPS, web content filtering, network forensics, and firewall management solutions.
- Architect and implement distributed Splunk environments, optimizing log ingestion, data processing, monitoring, scalability, and performance.
- Integrate Splunk SOAR with SIEM platforms, Palo Alto security solutions, CrowdStrike, and ServiceNow.
- Integrate Gigamon and ExtraHop visibility solutions for deep packet inspection, network flow mapping, threat investigation, and toolchain optimization.
- Develop enterprise log management capabilities for collecting, correlating, analyzing, and monitoring security events.
- Collaborate with cross-functional teams to implement security controls aligned with NIST, FedRAMP, and enterprise log management standards.
- Diagnose and resolve cybersecurity and infrastructure issues, provide escalation support, and help restore system functionality.
- Support secure remote access, cloud migration, load balancing, and network visibility initiatives.
- Explain security architectures and technical designs to customers and support teams.
- Coach junior engineers and identify improvements to security monitoring, automation, incident response, and infrastructure effectiveness.
View Full Description & ApplyYou'll be redirected to the employer's site
