Sentinel Siem Jobs Near Me

Position Overview:

We are seeking a highly skilled and experienced SIEM Engineer with expertise in Microsoft Sentinel, Cribl, and infrastructure performance monitoring. This role is responsible for the design, implementation, administration, and continuous improvement of the organization's Security Information and Event Management, also known as SIEM, ecosystem.

The SIEM Engineer will support and manage Microsoft Sentinel and the broader SIEM development stack, ensuring reliable log ingestion, visibility, monitoring, and threat detection capabilities. This individual will proactively manage data sources, onboard new log sources, develop security use cases, and enhance detection and response capabilities.

Working closely with Security Operations, Infrastructure, and Security Leadership, the SIEM Engineer will continuously assess the evolving threat landscape and adapt security monitoring capabilities to help protect the organization from emerging risks.

The ideal candidate possesses strong technical expertise across multiple cybersecurity domains, including governance and compliance, cloud security architecture, and modern cloud platforms such as software as a service, infrastructure as a service, and platform as a service.

Responsibilities:

1. Design, implement, administer, and maintain the Microsoft Sentinel platform.
2. Design, implement, and manage log ingestion pipelines utilizing Cribl.
3. Develop, optimize, and maintain SIEM content, including analytics rules, alerts, workbooks, and dashboards.
4. Monitor the health, availability, capacity, and performance of SIEM infrastructure and supporting systems.
5. Manage platform upgrades, patches, and ongoing maintenance activities.
6. Identify, evaluate, and onboard new log and telemetry sources to improve security visibility.
7. Develop and maintain data normalization, parsing, filtering, and enrichment processes.
8. Support security event monitoring, correlation, and threat detection efforts.
9. Collaborate with Security Operations Center, also known as SOC, personnel to improve detection coverage and response capabilities.
10. Assist in developing new searches, use cases, dashboards, and reporting capabilities.
11. Partner with Security, Infrastructure, Cloud, and IT teams to implement security best practices.
12. Support incident investigations through log analysis, event correlation, and forensic review.
13. Assess emerging threats and recommend improvements to monitoring and detection strategies.
14. Provide guidance, training, and support to internal teams on Microsoft Sentinel, Cribl, and SIEM best practices.

1. Bachelor's degree in Information Technology, Computer Science, Telecommunications, Engineering, or a related field, or equivalent work experience.
2. Minimum of 7 years of relevant cybersecurity, infrastructure, or SIEM engineering experience.
3. Strong experience with Microsoft Sentinel.
4. Strong experience with Cribl.
5. Strong experience with log ingestion and pipeline management.
6. Strong experience with security monitoring and alerting.
7. Experience with security event correlation and analysis.
8. Experience supporting incident response activities.
9. Experience with threat detection engineering.
10. Experience supporting digital forensics and investigations.
11. Strong understanding of network architecture and protocols.
12. Strong understanding of security controls and technologies.
13. Strong understanding of firewalls, intrusion detection systems, intrusion prevention systems, and endpoint security solutions.
14. Strong understanding of cloud security concepts across software as a service, infrastructure as a service, and platform as a service environments.
15. Ability to manage multiple initiatives and priorities in an active work environment.
16. Excellent written, verbal, and interpersonal communication skills.