Senior SIEM Engineer

Job not on LinkedIn

🔥 1 minute ago

🇺🇸 United States – Remote

💵 $85k - $141k / year

⏰ Full Time

🟠 Senior

👷🏻‍♀️ Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Coalfire

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2001

💼 Consulting

🏥 Healthcare

📦 Logistics

Consulting • Healthcare • Logistics

Coalfire is a cybersecurity services provider that helps businesses improve their security resilience and streamline regulatory compliance. The company offers expert-led services, including threat-focused cybersecurity programs, compliance automation, risk management, and security advisory services across various industries such as financial services, healthcare, retail, and technology. Coalfire is known for its hacker and defender expertise, and its platforms are designed to fortify clients' cyber resilience, reduce attack surfaces, and accelerate the achievement of compliance objectives like FedRAMP and HITRUST.

📋 Description

• Design, implement, and maintain SIEM platform architectures across AWS, Azure, and GCP environments • Build and operate log collection and ingestion pipelines using forwarders, collectors, connectors, APIs, syslog, agents, and cloud-native services • Onboard, normalize, validate, and troubleshoot data sources across cloud platforms, operating systems, applications, network devices, identity systems, endpoint tools, and security controls • Establish platform standards for parsing, data models, field mappings, naming, tagging, retention, archival, access, and lifecycle management • Administer SIEM platforms, including configuration, upgrades, patching, capacity planning, performance tuning, storage optimization, licensing, and availability monitoring • Develop and maintain infrastructure-as-code, automation, and deployment workflows • Implement platform monitoring and health checks • Integrate SIEM platforms with endpoint, identity, vulnerability management, threat intelligence, network security, ticketing, and incident response systems • Provide data and platform services to detection engineering and security operations teams • Support FedRAMP continuous monitoring and related compliance requirements • Participate in platform changes, releases, migrations, and modernization efforts • Follow and improve operational runbooks for incidents, outages, ingestion failures, and degraded performance • Troubleshoot complex platform and integration issues and escalate appropriately • Create technical documentation, architecture diagrams, standard operating procedures, knowledge-base articles, and handoff materials • Participate in client meetings as a technical resource • Contribute to platform roadmaps, operational metrics, service improvements, and reusable patterns

🎯 Requirements

• Proven experience implementing, administering, or operating SIEM and security logging platforms in enterprise, cloud, or high-compliance environments • Experience delivering platform capabilities from requirements and design through implementation, validation, documentation, and operational handoff • Demonstrated success integrating security, cloud, endpoint, identity, network, and operational tools into a cohesive monitoring platform • Experience diagnosing data quality, ingestion, pipeline, performance, availability, access, and integration problems • Experience working under strict regulatory or industry frameworks • Hands-on systems engineering and architecture experience • Cloud experience with AWS, Azure, or GCP • Administration and troubleshooting experience with Splunk, Microsoft Sentinel, Elastic, or Sumo Logic • Experience with log collection, ingestion, parsing, normalization, enrichment, and retention workflows • Working knowledge of cloud-native logging and security services, operating systems, networking, identity, APIs, and enterprise security tools • Experience with automation and infrastructure-as-code using Terraform, Ansible, GitLab, GitHub, Python, or similar technologies • Understanding of monitoring, alerting, capacity planning, performance management, availability, backup, recovery, and disaster recovery • Ability to work effectively in Agile environments with cross-functional technical teams • Excellent communication, organizational, documentation, and problem-solving skills • Ability to work independently and collaboratively • Critical-thinking skills balancing security, compliance, reliability, cost, and mission requirements • Ability to adapt quickly in fast-paced, dynamic environments • One SIEM or security operations certification, such as Splunk Enterprise Certified Admin, Sumo Logic Administration, or Microsoft Security Operations Analyst Associate • One professional-level cloud certification, such as AWS Solutions Architect Professional, AWS DevOps Engineer Professional, Azure Solutions Architect Expert, or GCP Cloud Architect • Bachelor’s degree in information technology, computer science, cybersecurity, or a related field, or equivalent combination of education and work experience

🏖️ Benefits

• Flexible work model allowing employees to choose when and where they work most effectively • Employee resource groups • In-person and virtual events • Paid parental leave • Flexible time off • Certification and training reimbursement • Digital mental health and wellbeing support membership • Comprehensive insurance options • Equal opportunity and pay equity • Reasonable accommodation for individuals with disabilities