Platform SIEM Engineer II

Responsibilities

• Provide first line support of production impacting issues before engaging additional resources.
• Monitor, manage, and optimize SIEM platform performance, including but not limited to:
  Splunk, Google Sec Ops, Microsoft Sentinel, Securonix, Crowd Strike NG SIEM, Palo Alto XSIAM.
• Maintain, manage, and troubleshoot log collection solutions running on Linux and Windows systems supporting data pipelines into SIEM platforms.
• Identify and remediate critical log ingest gaps to support continuous security monitoring.
• Communicate with leadership and support roles (internal and external).
• Manage ticket request/incident statuses and provide timely follow up to internal and external customers.
• Participate in projects/initiatives as needed.
• Document network architectures and topologies.
• Keep up-to-date with information security news, techniques, and trends.

• Have 2+ years of experience in SIEM administration, security operations, or a related field.
• Have hands‑on experience with at least one SIEM platform such as Splunk, Microsoft Sentinel, Google Sec Ops, Securonix, Crowd Strike NG SIEM, or Palo Alto XSIAM.
• Understand log data pipelines, parsing, normalization, and troubleshooting methodologies.
• Comfortable administering and troubleshooting Linux and Windows systems.
• Experience working with cloud platforms such as AWS, Azure, or GCP.
• Can independently troubleshoot operational issues and manage competing priorities.
• Communicate clearly with both technical and non‑technical audiences.
• Maintain strong documentation and operational discipline in a fast‑paced environment.
• Have scripting experience in Python, Bash, or Power Shell.
• Hold relevant security or cloud certifications.