Senior Cyber Security Engineer (SIEM)

About the role

We are seeking a highly skilled Senior Cyber Security Engineer (SIEM) to join our security engineering team. The role focuses on designing, implementing, optimizing, and maintaining enterprise SIEM solutions such as Splunk, Cribl, and Microsoft Sentinel to provide robust security monitoring and threat detection.

Key responsibilities

• Architect, deploy, configure, and maintain SIEM platforms including Splunk, Cribl, and Microsoft Sentinel.
• Manage ingestion pipelines, data onboarding, parsing, normalization, and log source integration.
• Develop and optimize dashboards, search queries, alerts, and correlation rules for enhanced threat detection.
• Ensure high availability, performance tuning, and scalability of SIEM solutions.
• Build and maintain advanced detection content aligned with MITRE ATT&CK and threat intelligence.
• Integrate SIEM with security tools such as CrowdStrike, firewalls, EDR, identity platforms, cloud workloads, and network devices.
• Maintain logging compliance for ISO 27001, SOC 2, NIST and conduct periodic audits.
• Collaborate with SOC analysts, threat hunters, cloud engineers, and infrastructure teams.

Required profile

• Bachelor’s degree in Cybersecurity, IT, Computer Science or equivalent experience.
• 5+ years of experience in cybersecurity with a strong focus on SIEM engineering.
• Proven hands‑on expertise with Splunk Enterprise, Splunk Enterprise Security, Cribl Stream/Edge, Microsoft Sentinel, and CrowdStrike Falcon.
• Strong knowledge of log management, data pipelines, detection engineering, and security analytics.

Required skills

• Splunk Enterprise / Splunk Enterprise Security
• Cribl Stream / Cribl Edge
• Microsoft Sentinel
• CrowdStrike Falcon (EDR, telemetry integration)
• Query languages: SPL, KQL
• Python, PowerShell, Bash scripting
• Cloud platforms: Azure, AWS, GCP