remote
Senior SIEM Security Engineer - Cisco
Security Engineer
Lead the design, deployment, and optimization of enterprise‑grade SIEM and security telemetry solutions on a hybrid cloud platform, driving reliability, automation, and operational excellence for a global cloud‑managed network.
About the role
Key Responsibilities
- Architect, implement, and maintain Splunk‑based SIEM and security telemetry pipelines across a hybrid cloud environment.
- Develop and automate security monitoring, alerting, and incident response workflows to improve detection accuracy and reduce mean time to resolution.
- Collaborate with platform, network, and security teams to integrate observability data, ensuring comprehensive coverage of infrastructure and application layers.
- Lead continuous improvement initiatives, including performance tuning, data retention strategies, and lifecycle management of security assets.
- Provide technical guidance and mentorship to junior engineers, fostering a culture of security excellence and knowledge sharing.
Requirements
- 5+ years of experience in SIEM engineering, with deep expertise in Splunk and related security analytics tools.
- Strong background in cloud security, hybrid cloud architectures, and automation frameworks (e.g., SOAR, Terraform).
- Proven ability to design scalable, high‑availability security telemetry solutions and optimize query performance.
- Excellent communication skills and a collaborative mindset for cross‑functional teamwork.
- Experience with observability platforms and incident response orchestration is a plus.