SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Securonix is a cybersecurity unicorn backed by Vista Equity Partners, recognized as a five-time leader in the Gartner Magic Quadrant for SIEM. The company serves over 1,000 customers worldwide, including 10% of the Fortune 100, with a network of 150+ partners and MSSPs.
As a Senior SIEM Engineer in the Professional Services team, you will be a hands-on technical expert responsible for architecting, planning, implementing, and operationalizing the Securonix Unified Defense SIEM platform for enterprise customers. This is a customer-facing role where you will lead end-to-end SIEM implementations and integrations, working directly with clients to understand their business requirements and threat landscape to develop tailored security use cases.
Key responsibilities include:
- Lead end-to-end SIEM implementation and integration projects in customer environments
- Understand customer business requirements and industry-specific threat landscapes to design custom use cases for security and incident monitoring
- Coordinate deployment of collectors and agents in on-premises networks for data collection and forwarding
- Design and implement secure data flow into the Securonix cloud platform following industry best practices
- Develop content, use cases, data models, dashboards, and connectors to support custom requirements
- Troubleshoot end-to-end network and infrastructure issues during data onboarding
- Deploy and integrate the Securonix SOAR solution with customer infrastructure for response orchestration
- Engage with customers and internal product development teams to gather requirements and suggest product improvements
- Provide training and enablement to customers and partners for successful platform adoption
- Coordinate with service delivery managers, engineering, maintenance, and operational support teams to ensure timely project delivery
The ideal candidate will have demonstrated expertise in information security and networking, extensive customer-facing experience, and deep SIEM and SOAR software expertise. While Securonix platform experience is desired, the company will train qualified candidates. You will work with industry-leading SIEM solutions and help customers stay ahead of evolving cyber threats.
Requirements:
- 8+ years of experience in information security and SIEM field
- Strong understanding of SIEM solutions such as Splunk, Qradar, ArcSight, Logrhythm, and Exabeam
- Experience deploying SIEM across multiple customers
- Good understanding of MITRE ATT&CK matrices, kill chains, and other attack models
- Strong communication skills and customer-facing experience
- Strong knowledge of scripting languages such as Python and PowerShell
- Industry certifications such as CISSP or CISM
Preferred qualifications:
- BS in Computer Science, Information Systems, or Cybersecurity
- 3-4+ years of experience in UEBA deployment
- Working knowledge of machine learning in cybersecurity
- Working knowledge of cloud technologies such as AWS, Azure, and Google Cloud
- Good understanding of log collection methodologies and aggregation techniques (Syslog-NG, syslog, Nxlog, Windows Event Forwarding)
- Good understanding of Hadoop ecosystem and Apache technologies
- Experience integrating endpoint security and host-based intrusion detection solutions
- Experience with network forensics and toolsets such as Wireshark, PCAP, tcpdump
