Senior Syslog Engineer

🕒 May 14

Apply Now

Find Similar Remote Jobs

Receive Emails For Remote Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Securonix

WebsiteLinkedInAll Job Openings

501 - 1000 employees

🔒 Cybersecurity

☁️ SaaS

🔐 Security

Cybersecurity • SaaS • Security

Securonix is a leader in cybersecurity, providing advanced solutions in Security Information and Event Management (SIEM) reinforced by artificial intelligence. The company offers a suite of products designed to detect, investigate, and respond to cyber threats, including user and entity behavior analytics (UEBA) and security orchestration automation and response (SOAR). Securonix specializes in cloud security monitoring and offers deployments on platforms like AWS, Google Cloud, and Microsoft Azure. Their solutions aim to enhance threat detection speed and precision, reduce false positives, and streamline security operations for organizations across various industries, particularly in the financial services and healthcare sectors.

📋 Description

• Design, implement, and optimize syslog-ng configurations for high-volume log ingestion environments • Develop and maintain complex filtering logic to ensure accurate routing, normalization, and noise reduction of logs • Analyze and improve log pipeline performance (CPU, memory, latency, throughput) • Build efficient, scalable, and fault-tolerant syslog architectures • Troubleshoot issues related to high CPU/memory usage, message drops / backpressure, ordering and duplication issues, and Network/TCP/TLS ingestion problems • Optimize buffering, batching, and flow control mechanisms in syslog-ng • Work closely with SIEM platforms (e.g. Securonix, Splunk, ELK) to ensure seamless ingestion • Ensure log integrity, reliability, and completeness across the pipeline • Implement best practices for log parsing (RFC3164, RFC5424), structured vs unstructured logs, and Secure syslog (TLS) • Perform capacity planning and load testing for syslog pipelines • Create test frameworks to validate syslog filters and configurations • Document standards, guidelines, and reusable configurations

🎯 Requirements

• Deep expertise in syslog-ng (mandatory) • Strong understanding of syslog protocol internals: RFC3164, RFC5424, TCP/UDP/TLS behavior • Expertise in designing syslog filters and routing logic • Strong experience with log parsing, pattern matching, and regex optimization • Experience tuning: log- iw -size, log- fifo -size, flush_lines, so_rcvbuf, disk-buffer and memory management • Understanding of backpressure, buffering, and flow control • Experience handling high EPS (10K–100K+) environments • Ability to debug: Message loss, Duplicate events, Out-of-order processing, High CPU/memory usage • Strong Linux debugging skills: tcpdump, netstat, ss, top, strace • Experience with one or more: Splunk / ELK / QRadar • Understanding of log ingestion pipelines (Kafka, Spark, etc.) • Knowledge of data enrichment and normalization

🏖️ Benefits

• Equal employment opportunities (EEO) to all employees and applicants • Compliance with non-discrimination in employment • Prohibition of unlawful employee harassment