Lead SIEM Engineer Jobs

Lead SIEM Engineer

Lead SOC SIEM Engineer. Senior SOC SIEM Content Engineer to join and large expan...

Location

United Kingdom , Hemel Hempstead

Salary:

70000.00 - 75000.00 GBP / Year

Fynity

Expiration Date

Until further notice

Requirements

Solid hands-on experience with SIEM tools like Splunk, Sentinel or QRadar
A good grip on security best practices and standards (ISO 27001/27002, PCI DSS)
Familiarity with frameworks such as NIST, ISO and CIS
Comfortable scripting in Python, PowerShell and regex
The ability to work across multiple projects and still keep the detail sharp
Willing and able to get DV clearance

Job Responsibility

Building, tuning and looking after SIEM content such as rules, dashboards, and reports, making sure threats don’t get missed
Keeping an eye on the data, spotting issues early and helping us respond quickly
Working side by side with Analysts, Architects, PMs and Engineers to make sure the SIEM content hits the mark
Bringing the latest threat intel, vulnerabilities and attack methods into our set-up
Helping to shape and maintain security standards and procedures

Fulltime

Solutions Engineering Lead

We are hiring a Solutions Engineering Team Lead for the East region to scale and...

Location

United States , Boston

Salary:

220000.00 - 300000.00 USD / Year

Coralogix

Expiration Date

Until further notice

Requirements

7+ years in customer-facing technical roles (Sales Engineering, Solutions Architecture or similar)
3+ years leading or managing pre-sales technical teams with a record of coaching success
Experience supporting or owning team-level quotas within a sales organization
Hands-on expertise with the following: Kibana, Grafana, Datadog, New Relic, Splunk, Honeycomb, Jaeger, OpenSearch
Proficiency crafting PromQL, Lucene and SQL queries for troubleshooting and dashboards
Deep knowledge of cloud services central to observability: AWS: EKS, Fargate, Lambda, CloudFormation, CloudWatch Logs and Metrics
Azure Monitor and equivalents in Google Operations Suite
Working knowledge of OpenTelemetry, modern DevOps and container platforms (Kubernetes, Docker)
Strong ability to communicate with engineers and C-level audiences alike

Job Responsibility

Own regional SE performance in partnership with Account Executives, ensuring quota attainment and deal velocity
Hire, onboard and mentor Solutions Engineers, setting clear KPIs and career paths
Maintain a strong personal presence with customers, modeling technical excellence and closing strategic opportunities
Improve processes for discovery, POC execution, documentation and knowledge sharing
Collaborate with Product, Support and Customer Success to shorten feedback loops and accelerate adoption
Architect and deploy reference designs for logs, metrics, traces, SIEM and Kubernetes monitoring across AWS, Azure and GCP
Lead white-board deep-dive sessions on ingestion pipelines, index-free querying and cost-optimized retention strategies
Provide escalation support during POCs: troubleshoot complex issues, analyze logs, traces, craft PromQL, Lucene or Dataprime queries and isolate root causes
Track technical success metrics such as POC win rate, onboarding time-to-value and validation scorecards, converting data insights into process improvements
Contribute code or scripts (Python, Go or Java) for custom exporters, automation and synthetic monitoring

What we offer

Comprehensive and inclusive employee benefits for healthcare, dental, and mental health benefits
401(k) plan and match
Paid sick time and paid time off

Fulltime

Vulnerability Management Technical Lead

The role includes managing and optimizing vulnerability management workflows usi...

Location

India , Bengaluru

Salary:

Not provided

Sopra Steria

Expiration Date

Until further notice

Requirements

4 to 8 years of experience
engineering graduate - preferably B.E./B.Tech in IT or Computer Engineering
strong analytical skills
experience with security information and event management (SIEM) tools
~5 years of experience in information security, specifically in end-to-end vulnerability management with 2-3 years hands-on Rapid7 experience
advanced degrees or certifications preferred
knowledge of current cybersecurity trends, threats, and techniques
understanding of regulatory requirements
ability to work independently and collaboratively
good interpersonal and communication skills

Job Responsibility

ensure that Rapid7 is fully and effectively implemented
assist with design, implementation, and optimization of automated tagging workflows
build and refine InsightVM dashboards and reports for insights
integrate Rapid7 with external systems for accurate asset context and automated remediation ticket creation
collaborate with IT teams to reduce false positives and orphaned assets
implement and support scan scheduling and tuning
assist in risk acceptance workflows
troubleshoot scan and synchronization issues
drive process improvements in vulnerability management workflow
deliver security reports and presentations

What we offer

inclusive and respectful work environment
positions open to people with disabilities

Fulltime

Security Engineer II

The Security Engineer II is an individual contributor who will participate and m...

Location

United States , Fountain Valley

Salary:

83940.00 - 120032.00 USD / Year

Hyundai AutoEver America

Expiration Date

Until further notice

Requirements

Bachelor’s Degree in Computer Science, Information Systems, or related field, or equivalent experience
Minimum 3 years of IT relevant experience or equivalent combination of experience plus at least 1 year of experience performing Security Engineering/Planning/Operations, preferably with SIEM or vulnerability management
Experience in medium to complex computing environments, with advanced knowledge in security technologies and services
Hands-on experience with at least two or more of the following Enterprise Security Technologies: Network Intrusion Prevention/Detection
Virtual Private Networks
SSL, IPSec, and Site-to-Site
Enterprise-Class Stateful Inspection Firewalls
Network Access Controls in context to Identity Management
Windows Server OS & Desktop OS
Network Packet Inspection

Job Responsibility

Design, build, test, and deploy new security technologies, which include the development of the operational manual and run books
Provides technical security operations engineering services to support and update existing security systems and works to automate processes related to security implementations, monitoring, and enforcement
Investigates, recommends, evaluates, deploys, and integrates operational security tools (e.g., SIEM, vulnerability scanning) and techniques to enhance protection of corporate assets and infrastructure
Participate in technical risk assessments and security exposure analyses of systems, networks, and business applications
Analyzes network security elements and overall network security architectural designs to ensure secure and optimal system and network performance and cost-effectiveness
Oversees the installation, configuration, and supportive processes of security technologies
Participate in or lead the Incident Response activities
Interacts with internal and external clients on security operations requirements, identifies security processes, and develops strategies/solutions to security issues
Keeps fully abreast of trends and changing technologies as they relate to IT, Network Engineering, and Information Security fields
Lead or assist in periodic or ad-hoc security reports that provide relevant situational awareness to our senior stakeholders

Fulltime

Cyber Security Engineer

Darumatic is an IT Consultancy and Recruitment Services Company that focuses on ...

Location

Australia , Canberra

Salary:

Not provided

Darumatic

Expiration Date

Until further notice

Requirements

Character clearance, including a police check
Negative Vetting level 1
Political neutrality
Australian citizen
Experience using Sentinel or a similar SIEM solution is essential
In-depth familiarity with the Australian Government Information Security Manual
Experience with security technologies such as endpoint protection, firewalls and IDS/IPS
Extensive experience in Windows, Linux, networking and system administration
Experience with security services in the cloud (Azure or AWS)

Job Responsibility

Detection and coordination of incident response to threats, both foreign and domestic, against critical electoral systems
Augmenting the existing operations team to assist in uplifting the existing capability
Maintenance of cyber security monitoring and analysis toolsets
Taking a lead role in the build of the cyber security architecture through consultation with client's internal teams to secure this architecture
Working primarily in the office
Ability to work shifts as required in response to cyber security incident, and also to support electoral events at key periods (e.g. close of rolls, polling day)

Senior Detection Engineer

This is a detection engineering role that leverages knowledge of monitoring, ana...

Location

Singapore , Singapore

Salary:

Not provided

Marriott Bonvoy

Expiration Date

Until further notice

Requirements

Bachelor’s degree in Computer Sciences or related field or equivalent experience/certification
3+ years of collective experience in Splunk SIEM (Splunk Enterprise Security) threat detection use case development or UEBA (Exabeam) use case development for insider threat use case development
5+ years of experience in security functions such as SOC, CIRT, security engineering, risk management, vulnerability management or technical infrastructure operations, administration, or systems engineering
scripting or programming language, including Python
Current information security certification such as Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP) preferred
offensive and defensive security certifications such as CEH, IGAC Cyber Defense, OSCP or other related certifications preferred
Splunk Certification, including Splunk Enterprise Security Certified Admin preferred
use case development experience on the Exabeam platform preferred
working knowledge of the NIST Cyber Security Framework and ISO/IEC 27001:2022 preferred
working knowledge of the MITRE ATT&CK Framework preferred

Job Responsibility

Lead collaboration sessions within the cyber security tower and other business units to devise security monitoring use cases
engage and collaborate with other security engineers and architects as needed to keep pace with the evolution of corporate infrastructure and applications and share that knowledge with peers as appropriate
document prospective security monitoring use cases with MITRE ATT&ACK mappings using standard templates and methodologies
inform and consult other cyber ops teams of required data onboarding and integrations for use case development
develop analytics, correlation searches, dashboards, reports and alerts within the SIEM and UEBA platforms
solicit feedback for pre-production security monitoring content through peer review process and user acceptance testing for tuning
document developed security monitoring content in a documentation registry using department standard templates and methodologies
manage field mapping and transmission of security monitoring alerts to the security incident response platform for SOC analyst consumption as outlined in process documentation
provide governance support for the content development function entailing content development standards compliance, change management approvals for SIEM or UEBA content, and lifecycle management of developed security monitoring content
service operational requests in queue such as analytics content performance tuning, filtering, search refinement, parsing issues

Fulltime

Security Engineer II

PagerDuty is seeking an Enterprise Security Engineer to join its global IT Opera...

Location

Canada , Toronto

Salary:

122000.00 - 185000.00 CAD / Year

PagerDuty

Expiration Date

Until further notice

Requirements

At least 3 years of experience in the information security industry, with 2+ years in network security or zero-trust, and 2+ years in security architecture or solution experience
Knowledge of Information Security concepts, especially in the areas of security threats, analyzing security logs and driving Incident response
Knowledge and practical experience in network security and zero-trust
Understanding of the IAM cybersecurity landscape, including identity stores, authentication/authorization, strong authentication, and privileged access management capabilities and methodologies
Understanding of security technologies and concepts, including SIEM, MDR/XDR, EDR and vulnerability management
Understanding of security best practices and frameworks (e.g., MITRE ATT&CK, NIST Cybersecurity Framework)
Knowledge of incident response processes

Job Responsibility

Partner closely with CISO organization to design and implement enterprise IT security architectures and solutions
Tracking the evolution of cutting-edge security technologies, and keeping up to date of the latest security threats and trends
Focus on enterprise security and zero-trust technology, serving as the principal technical expert in this area within the Enterprise Security department
Monitors security alerts and leads the team in identifying and responding to security threats
Monitors systems for vulnerabilities, provides prioritization, and drives remediation efforts
Working cross-functionally to triage suspicious activity and drive remediation (performing L2-L3 duties as needed)
Analyzing threat intelligence feeds to develop metrics, alerts, and techniques to protect against new and emerging attack vectors
Develop metrics, thresholds, alerts, dashboards, and incident response playbooks
Drive the design and development of automated security response and maintenance solutions
Oversee our workstation vulnerability management & endpoint compliance program

What we offer

Competitive salary
Comprehensive benefits package
Flexible work arrangements
Company equity
ESPP (Employee Stock Purchase Program)
Retirement or pension plan
Generous paid vacation time
Paid holidays and sick leave
Dutonian Wellness Days & HibernationDuty - companywide paid days off in addition to PTO
Paid parental leave: 22 weeks for pregnant parent, 12 weeks for non-pregnant parent

Fulltime

Lead Threat Intelligence Analyst

We are looking for a Lead Threat Intelligence Analyst. In this role, you'll be a...

Location

United States , New York

Salary:

133900.00 - 198160.00 USD / Year

Take-Two Interactive Software, Inc.

Expiration Date

Until further notice

Requirements

At least 5-7 years of experience in cybersecurity
Minimum of 3 years in a dedicated threat intelligence role
Strong understanding of the cyber threat landscape, including knowledge of threat actor groups, common attack vectors, and malware families
Proven ability to analyze complex data from various sources (e.g., open-source intelligence, dark web forums, technical reports) to form a cohesive threat picture
Familiarity with common threat intelligence frameworks like MITRE ATT&CK, the Cyber Kill Chain, and Diamond Model
Excellent written and verbal communication skills, with the ability to present technical information clearly to both technical and non-technical audiences
Experience with threat intelligence platforms (TIPs), security information and event management (SIEM) systems, and forensic tools

Job Responsibility

Lead the design, development, and continuous improvement of the organization’s cyber threat intelligence (CTI) program
Perform deep-dives into cyber threats, including analyzing malware, understanding adversary tactics, techniques, and procedures (TTPs), and tracking threat actor groups
Create and refine threat models and frameworks to predict and prepare for potential attacks
Work with our Global Security Operations Center (GSOC), Detection Engineering, Automation Engineers and Incident Response teams to integrate threat intelligence into our detection and prevention systems
Generate timely and high-quality intelligence/Threat Landscape reports, risk forecasts and alerts for technical and executive audiences
Promote automation of indicator ingestion, correlation, and dissemination across GSOC, Automation and IR platforms
Define and track key performance indicators (KPIs) for the threat intelligence program
Conduct periodic maturity assessments of the threat intelligence function
Provide guidance and mentorship to junior analysts

What we offer

Medical (HSA & FSA)
dental
vision
401(k) with company match
employee stock purchase plan
commuter benefits
in-house wellness program
broad learning & development opportunities
a charitable giving platform with company match
Fitness allowance

Fulltime

Lead SIEM Engineer

Fynity

Location:
United Kingdom, Farnborough

Category:
IT - Software Development

Contract Type:
Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Additional Information:

Job Posted:
December 08, 2025

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Lead SIEM Engineer