Security Engineer III - SIEM (Hybrid)

Location: Hybrid, on-site at the NYC office; candidates should be comfortable visiting the office twice a week once the development center is established. The position is for U.S. candidates.

Base salary: $120,000–$180,000 per year, with eligibility for bonuses and equity grants.

Company

Global cybersecurity organization building an AI-native platform that protects organizations by processing large-scale security data and stopping breaches.

What you will do

• Evaluate, develop, maintain, and enhance data connectors and parsers for ingesting data from third-party security products into a next-generation SIEM platform.
• Set up and maintain laboratory and test environments for security products, validate connectors, and troubleshoot integration issues.
• Investigate and resolve connector problems to ensure reliable log ingestion and provide on-call support for critical ingestion issues and production incidents.
• Collaborate with internal teams on logging, error handling, data normalization, and connector documentation.
• Research and implement security-log ingestion practices for firewalls, IDS/IPS, cloud security, endpoint security, and other security products.
• Work with customers, customer success, and customer support teams to resolve data-ingestion issues and maintain effective communication.

Requirements

• Bachelor’s or Master’s degree in Computer Science or a related field, or equivalent work experience.
• 6+ years of experience in cybersecurity and SIEM integrations.
• Experience developing data connectors or ingestion pipelines for SIEM platforms such as Splunk, Sentinel, Exabeam, or QRadar.
• Experience with security data normalization schemas, parsing, and data enrichment.
• Experience setting up and managing environments for firewalls, IDS/IPS, EDR, CASB, identity security, email security, and similar security products.
• Experience with security events and formats including Syslog, CEF, LEEF, JSON, and XML.
• Working knowledge of log processing or shipping tools such as Cribl, Splunk Forwarder, Azure Monitoring Agent, or LogScale Log Collector.
• Working knowledge of cloud-native logging services such as AWS CloudWatch, Azure Monitor, or GCP Logging.
• Proficiency in at least one programming language, preferably Python or Go.
• Strong documentation, communication, and customer interaction skills.
• Proven experience using AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency, and drive business outcomes.

Culture & Benefits

• Flexible, autonomous work culture focused on responsible AI adoption, experimentation, and innovation.
• Comprehensive physical and mental wellness programs.
• Competitive vacation and holidays, plus paid parental and adoption leave.
• Professional development opportunities for employees at every level and role.
• Employee networks, geographic neighborhood groups, volunteer opportunities, and a vibrant office culture with on-site amenities.