Principal Security Engineer

Job Summary

Working remotely in a full-time capacity, the Principal Security Engineer will architect, deploy, configure, and manage SIEM instances for clients while developing security use cases and alert configurations.

Key responsibilities

• Architecting, administrating, and maintaining SIEM instances for clients and internal use
• Evaluating client applications and prioritizing critical data sources based on security value
• Providing guidance on log collection methods and assisting clients with forwarding security logs to SIEM platforms

Required qualifications

• Hands-on experience managing, configuring, and deploying SIEMs, with CrowdStrike NextGenSIEM experience preferred
• Strong knowledge of information security best practices and current threat detection methods
• Solid foundation in IT, including system administration of Windows and networking technologies
• Experience with Query Languages such as KQL, SPL, and YARA-L
• Proficiency in managing Splunk, MS Sentinel, or Google Sec-Ops SIEM environments