RemoteLeaf Logo
Log in Sign up

Senior SIEM Engineer

2 hours, 58 minutes ago
United States
Full-time
Senior
Security Engineer
DevOps and Infrastructure
Agile Ansible AWS Azure CI/CD Cybersecurity Elasticsearch GitHub GitHub Actions GitLab Network Security Python SIEM Splunk Terraform
Apply Now
Coalfire

Coalfire

Coalfire is a cybersecurity advisor that helps organizations avert threats, reduce risk, and turn security into a competitive advantage, fueling their success.

Internet Software & Services
251-1K
Founded 2001
$9M raised
View All Jobs 11

Description

  • Design, implement, and maintain SIEM architectures across AWS, Azure, and GCP.
  • Build and operate log collection, ingestion, normalization, and retention pipelines.
  • Onboard and troubleshoot data sources across cloud, endpoint, identity, network, application, and security systems.
  • Administer SIEM platforms, including upgrades, patching, capacity planning, performance tuning, licensing, and availability monitoring.
  • Develop infrastructure-as-code, automation, and deployment workflows using tools such as Terraform, Ansible, GitLab, GitHub, and Python.
  • Implement monitoring and health checks for ingestion gaps, data quality, latency, resource constraints, and service degradation.
  • Integrate SIEM platforms with endpoint, identity, vulnerability, threat intelligence, ticketing, and incident response systems.
  • Support FedRAMP continuous monitoring through platform configuration, documentation, evidence, and repeatable procedures.
  • Troubleshoot platform and integration issues and maintain incident runbooks and operational documentation.
  • Collaborate with detection engineering, security operations, cloud engineering, compliance, clients, and other stakeholders.

Requirements

  • Experience implementing, administering, or operating SIEM and security logging platforms in enterprise, cloud, or high-compliance environments.
  • Hands-on experience with Splunk, Microsoft Sentinel, Elastic, Sumo Logic, or comparable SIEM platforms.
  • Experience designing and operating log collection, ingestion, parsing, normalization, enrichment, and retention workflows.
  • Cloud architecture, implementation, operations, and automation experience in AWS, Azure, or GCP.
  • Experience integrating security, cloud, endpoint, identity, network, and operational tools.
  • Experience with Terraform, Ansible, Python, GitLab, GitHub, or comparable automation and infrastructure-as-code technologies.
  • Knowledge of platform reliability, monitoring, alerting, capacity planning, performance, availability, backup, and disaster recovery.
  • Experience with systems engineering, architecture, requirements definition, integration, testing, and operational support.
  • One SIEM or security operations certification and one professional-level cloud certification are required.
  • Strong communication, documentation, problem-solving, collaboration, and independent working skills; consulting or managed-services experience is preferred.
  • Bachelor’s degree in information technology, computer science, cybersecurity, or a related field, or equivalent experience.
  • Preferred qualifications include CISSP, GIAC, Splunk Architect, cloud security, platform engineering, or automation certifications.

Benefits

  • Flexible work model supporting remote or office-based work.
  • Paid parental leave and flexible time off.
  • Certification and training reimbursement.
  • Digital mental health and wellbeing support membership.
  • Comprehensive insurance options.
  • Employee resource groups and in-person and virtual community events.
  • Approximately 10% travel for corporate events, training, or client needs.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

SkySlope

Security Engineering Manager

SkySlope 251-1K Internet Software & Services

SkySlope is hiring a Security Engineering Manager to build and lead its security engineering function, establishing a modern security program and delivering measurable risk reduction across the company’s real estate technology platform.

United States Full-time Lead Security Engineer
$180k-$200k
AWS Azure Secrets Management
3 hours, 13 minutes ago
Mom's Meals

Chief Information Security Officer (CISO)

Mom's Meals 251-1K Family Services

Mom’s Meals is seeking a Chief Information Security Officer and Vice President of IT Infrastructure, Support & Security to lead enterprise cybersecurity, cloud infrastructure, IT operations, support, compliance, and resilience across the organization.

United States Full-time Executive Infrastructure Engineer Security Engineer
Azure Cybersecurity HIPAA Penetration Testing SOC
3 hours, 13 minutes ago
EnableComp

Security Engineer (REMOTE)

EnableComp 251-1K Insurance

EnableComp is hiring a Security Engineer to embed secure-by-design practices across applications, cloud infrastructure, data environments, and Agentic AI systems while supporting compliance and innovation.

United States Full-time Mid Level Security Engineer
AWS Azure Bash CI/CD DevSecOps Docker GCP GitHub Actions GitLab CI Go HashiCorp Vault HIPAA Jenkins Kubernetes Microservices Penetration Testing PowerShell Python Secrets Management Terraform
3 hours, 28 minutes ago
DoorDash

Senior Security Data Engineer

DoorDash 10K-50K Air Freight & Logistics

DoorDash is hiring a Cyber Defense Data Pipelines Engineer to operate and scale security telemetry pipelines across AWS and GCP, enabling reliable detection, investigation, and response across DoorDash, Deliveroo, and Wolt.

United States Full-time Senior Data Engineer Security Engineer
$160k-$235k
AWS Bitbucket CI/CD Cybersecurity Docker Elasticsearch GCP GitHub GitHub Actions GitLab Go Java Kafka Kubernetes Penetration Testing Python REST API Rust SIEM Snowflake Splunk SQL
1 day, 2 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers