Principal SIEM Engineer

Job Summary

As a senior hands-on individual contributor, the full-time remote Principal SIEM Engineer will build and manage the SIEM and SOAR platforms for the Security Operations Center, focusing on configuration, automation, detection content, and troubleshooting the ingestion pipeline.

Key responsibilities

• Develop and maintain SOAR content, including case management configurations and escalation playbooks
• Configure and maintain the SIEM, ensuring proper log source tagging and alert definitions
• Troubleshoot the end-to-end ingestion and case creation pipeline, serving as the tier 2 escalation point for platform issues

Required qualifications

• Bachelor's degree in Information Technology, Cybersecurity, or a related field
• 7+ years of experience in deploying and operating enterprise security monitoring and logging platforms
• 7+ years of experience in security operations or security engineering supporting a security operations center
• 5+ years of experience building SOAR automation in a production environment
• Demonstrated experience troubleshooting a log pipeline end to end and resolving issues directly