Elastic SIEM Security Architect at Synopsys Inc Austin, TX

Elastic SIEM Security Architect job at Synopsys Inc. Austin, TX.

At Synopsys, we drive the innovations that shape the way we live and connect. Our technology is central to the Era of Pervasive Intelligence, from self-driving cars to learning machines. We lead in chip design, verification, and IP integration, empowering the creation of high-performance silicon chips and software content. Join us to transform the future through continuous technological innovation.

You are a highly skilled and driven Cyber Security Engineer, passionate about protecting enterprise environments and advancing threat detection capabilities. You thrive in dynamic settings, consistently seeking to improve both the security posture and the operational efficiency of SIEM platforms. Your expertise spans hands‑on Elastic SIEM administration, log source onboarding, and the development of advanced threat detection strategies. You bring a collaborative spirit, working closely with application owners, CSIRT, and Sec Ops teams to align security objectives with business priorities.

You possess a deep understanding of cloud and on‑prem environments, and you leverage modern technologies and scripting languages to deliver scalable solutions. Your communication skills enable you to translate complex technical concepts into clear documentation and actionable insights. You value autonomy, taking initiative in driving projects forward and continuously exploring new data analytics and machine learning approaches to security challenges.

Your curiosity and commitment to learning ensure you stay ahead of emerging threats, and your dedication to quality means you always deliver reliable, well‑documented solutions. If you are ready to make a tangible impact on the security landscape at Synopsys, we invite you to join our team of innovators.

• Implement, administer, and maintain the SIEM platform, ensuring robust and scalable security event management.
• Collaborate with application owners to define and establish logging standards and requirements for enterprise systems.
• Onboard new log sources to the SIEM via syslog, endpoint agents, and APIs, optimizing coverage and visibility.
• Develop parsers, data enrichments, and normalization pipelines to extract actionable insights from diverse log data.
• Design and implement strategies for log data archiving and recovery, supporting compliance and forensic needs.
• Create advanced SIEM correlation rules, reports, and dashboards to detect and respond to emerging threats.
• Document SIEM platform configurations and parser developments for knowledge sharing and operational continuity.
• Partner with CSIRT and Sec Ops teams to tune threat detection rules, dashboards, and visualization charts for effective incident response.
• Monitor SIEM health, usage, and data growth, proactively addressing performance and scalability challenges.
• Develop data analytics and machine learning capabilities to enhance security use cases and threat detection.

• Elevate Synopsys’ threat detection and response capabilities through advanced SIEM engineering.
• Ensure enterprise‑wide visibility into security events, empowering rapid incident identification and resolution.
• Drive continuous improvement in log data quality and coverage, strengthening the organization’s security posture.
• Enable compliance with regulatory and audit requirements through reliable data archiving and recovery processes.
• Facilitate cross‑functional collaboration in threat hunting and incident remediation efforts.
• Advance the adoption of machine learning and data science in cybersecurity operations, positioning Synopsys as an industry leader.

• Extensive experience building and administering multi‑zoned Elasticsearch clusters, including Kibana configuration and data ingestion using Elastic agents, Logstash, or Filebeat.
• Proven ability to implement and manage Elastic clusters in both on‑premises and cloud infrastructures.
• Expertise in developing parsers, data enrichments, and normalization pipelines for diverse log data.
• Strong understanding of Elastic Common…