remote
Senior SIEM Engineer - Valiant Solutions, LLC
Software Engineer
Lead the design, deployment, tuning, and ongoing operation of an enterprise SIEM platform, ensuring reliable log ingestion across endpoint, network, cloud, and application layers to support 24/7 security monitoring.
About the role
Key Responsibilities
- Architect, implement, and fine‑tune the enterprise SIEM solution to meet performance, scalability, and compliance requirements.
- Manage end‑to‑end log collection from endpoints, network devices, cloud services, operating systems, and applications.
- Collaborate with SOC analysts, threat hunters, and engineering teams to develop detection rules, dashboards, and automated response playbooks.
- Monitor SIEM health, troubleshoot data gaps, and conduct regular performance optimizations.
- Provide technical guidance and mentorship to junior engineers and serve as the primary point of contact for SIEM‑related incidents.
Requirements
- 5+ years of hands‑on experience with SIEM platforms (e.g., Splunk, QRadar, ArcSight) in a large‑scale environment.
- Strong knowledge of log sources, parsing, normalization, and correlation across endpoint, network, cloud, and application layers.
- Proficiency in scripting languages such as Python for automation, data enrichment, and custom integrations.
- Experience supporting 24x7 SOC operations, including incident response and threat hunting workflows.
- Solid understanding of cloud security concepts (AWS, Azure, GCP) and related log formats.