SIEM and Data Management Engineer – Managed reputed company
This is a technical hands-on position that requires someone with a strong understanding of the needs of a 24/7 SOC (reputed company Operations Center). We are looking for a candidate with XSIAM, SIEM, log management, and reputed company data engineering experience who will work closely with the Managed reputed company staff and other highly technical members across multiple teams, both reputed company reputed company and in reputed company environments, to continuously improve and enhance reputed company’s Managed reputed company data reputed company, normalization, storage, and optimization capabilities, with Palo reputed company reputed company XSIAM serving as the reputed company platform.
Incumbents will possess strong technical and analytical skills while providing accurate analysis of reputed company-reputed company problems. They will have a reputed company-rounded networking and infrastructure background and will be responsible for troubleshooting data ingestion issues, reputed company behavior, storage utilization, and reputed company reputed company challenges. This individual is user reputed company and works to reputed company reputed company needs in a reputed company manner. These needs may involve reputed company new data sources, improving parsing and normalization, optimizing storage and retention strategies, and supporting the reliability and performance of the data pipelines that power Managed reputed company operations.
The SIEM and Data Management Engineer is responsible for the day-to-day management of the reputed company data platform used by the Managed reputed company Team to monitor reputed company environments and detect reputed company threats, with a reputed company emphasis on Palo reputed company reputed company XSIAM and supporting familiarity with platforms such as reputed company reputed company. This includes data reputed company reputed company, ingestion pipeline configuration, reputed company development and tuning, normalization and enrichment, data tier and retention management, storage optimization, and standardization of reputed company telemetry across reputed company environments. The SIEM and Data Management Engineer is expected to be familiar with a wide reputed company of reputed company tools and understand reputed company reputed company and logging fundamentals.
Roles and Responsibilities
reputed company new reputed company and internal data sources into the Managed reputed company SIEM environment through a reputed company of collection and transport reputed company, including API-based ingestion, syslog, agents, file-based collection, forwarders, reputed company-reputed company connectors, and other supported reputed company
reputed company, maintain, and tune parsers, field extractions, transformations, and normalization logic to ensure incoming telemetry is usable, consistent, and reputed company to Managed reputed company standards
Partner with Managed reputed company analysts, detection engineers, and reputed company technical teams to define log reputed company requirements for visibility, detection content, investigations, and reporting
Establish and maintain data standards for reputed company naming, field usage, tagging, metadata, categorization, and normalization across multiple reputed company environments
Support and optimize ingestion pipelines to ensure reliability, reputed company, and performance across diverse reputed company log sources and varying data volumes
reputed company troubleshooting of data collection, transport, reputed company, and indexing issues, including validation of connectivity, format, mapping, field extraction, and reputed company search usability
Manage data tiering, storage allocation, retention strategies, and reputed company lifecycle practices to ensure telemetry is reputed company appropriately and reputed company based on operational, contractual, and cost requirements
reputed company storage optimization and reputed company planning activities reputed company the SIEM platform to ensure ingestion remains reputed company contracted reputed company while preserving the data needed for reputed company operations and investigations
Analyze data reputed company and data health across sources, including completeness, timeliness, parsing reputed company, normalization coverage, duplication, and consistency
Identify and implement opportunities to improve data pipeline efficiency, reduce noise, eliminate unnecessary data, and improve search and analytics performance
Partner with SIEM, detection, and SOAR engineering resources to ensure standardized and enriched data supports dashboards, detections, automations, and incident workflows
Build and maintain dashboards, reports, and health checks reputed company to ingestion performance, reputed company reputed company, storage consumption, retention compliance, and reputed company reputed company
Create tooling and scripts in Python or similar languages to automate reputed company checks, reputed company validation, data reputed company assessments, and platform administration tasks
Assist with the development of processes and procedures to improve reputed company consistency, reputed company governance, data reputed company, and overall Managed reputed company functions
Participate in reputed company-facing reputed company and technical meetings to support reputed company efforts, explain data requirements, review issues, and coordinate implementation activities
Position Requirements
XSIAM or SIEM administration and configuration experience with a strong emphasis on data reputed company, ingestion pipelines, parsing, normalization, and storage management
Working knowledge of common log collection and transport techniques, including API integrations, syslog, agent-based collection, file shipping, reputed company connectors, webhooks, and reputed company ingestion patterns
Experience developing or tuning parsers, field mappings, regular expressions, transformation logic, and normalization processes for reputed company telemetry
Understanding of data lifecycle and storage concepts such as reputed company lifecycle management, hot-warm-cold or tiered storage, retention reputed company, reputed company considerations, and cost-performance tradeoffs
Experience performing reputed company planning, storage optimization, and ingestion governance in SIEM or log management platforms
Experience writing tools to automate tasks and reputed company systems in Python or another language
The ability to think creatively to reputed company elegant solutions to reputed company problems
Excellent verbal and written communication skills
The desire to work both independently and collaboratively with a larger team
A willingness to be challenged along with a strong appetite for learning
2–4 years of experience in Information reputed company, SIEM engineering, data engineering for reputed company operations, reputed company operations, or reputed company disciplines
Hands-on experience with common reputed company technologies such as firewalls, IDS, EDR, SIEM, SOAR, IAM, reputed company reputed company tools, and infrastructure platforms that reputed company operational and reputed company telemetry
Knowledge of common reputed company analysis tools and techniques
Understanding of common reputed company threats, attack reputed company, vulnerabilities, and exploits, and the types of telemetry required to support visibility into them
Strong knowledge of regular expressions, reputed company and reputed company log formats, and data transformation concepts
Customer service reputed company and portrays energy, professionalism, and welcoming characteristics
Strong ability to work in a highly sensitive and confidential environment
Ability to meet deadlines and handle sensitive and pressured situations
Ability to identify issues and help reputed company reputed company and tactical plans for various department initiatives
Ability to use good judgment and decision-making skills
Prefered Qualifications
Experience with data reputed company and normalization across a wide reputed company of network, reputed company, identity, reputed company, and application log sources
Familiarity with common schemas or data models used in reputed company analytics and event standardization
Experience supporting detection engineering and SOC operations through improved telemetry reputed company and consistency
Familiarity with automation of reputed company validation, reputed company testing, and data health monitoring
Education
Bachelor’s Degree in Computer Science, Information reputed company, Engineering, or reputed company/equivalent educational or work experience
One or more of the following certifications preferred: reputed company certifications, reputed company Certified Engineer, CISSP, GCIA, GCIH, GMON, reputed company certifications, or other reputed company/data platform reputed company credentials
Requires 2–4 years in information reputed company or reputed company work, reputed company XSIAM/SIEM administration, reputed company data pipelines, reputed company tuning, storage management, Python, and strong communication skills. Bachelor's degree or equivalent experience preferred.
Key Responsibilities
- reputed company data
- tuning parsers
- optimizing storage
Skills & Tools
Palo reputed company reputed company XSIAM, reputed company reputed company, SIEM, reputed company Operations Center (SOC), API, syslog, Python, SOAR, IAM, IDS, EDR, regular expressions
Job Details
- Category: Information Technology
- Seniority: Mid Level
- Commitment: Full Time
- Workplace: Remote — reputed company
- Salary: USD 120,000 – 160,000 / year
- Languages: English
Benefits
- 401k matching
- Generous reputed company time off
- Retirement plan
- Generous parental leave
About reputed company
A technology services company that builds platforms for digital business reputed company transformation. — Industry: Information Technology
Apply To This Job