Siem Engineer

Life on the team

Join a highly skilled Cyber Engineering team focused on building and enhancing modern security operations capabilities across a global enterprise environment. You will work at the intersection of security engineering, cloud technologies, SIEM operations, automation, and AI-driven security innovation, helping to protect critical business services through scalable and resilient security solutions.

This role offers the opportunity to work with industry-leading technologies including Microsoft Sentinel, Microsoft XDR, Microsoft Defender for Cloud, Azure, Cribl, Logic Apps, and Azure DevOps. You'll collaborate with security analysts, cloud engineers, infrastructure teams, architects, and platform specialists to design and deliver security capabilities that improve visibility, strengthen detection coverage, and drive operational efficiency.

We are looking for someone who enjoys solving complex technical challenges, automating repetitive tasks, and continuously improving security platforms through engineering excellence and innovation.

What youll need

Essential Skills & Experience

• 8 to 12 years overall experience in Cyber security and 5+ years of hands-on experience in SIEM engineering, Microsoft Sentinel expertise, KQL skills, and hands-on Microsoft Security experience are mandatory.

• Hands-on experience with one or more Microsoft security technologies such as:

• Microsoft Sentinel

• Microsoft XDR

• Microsoft Defender for Cloud

• Azure Monitor / Log Analytics

• Strong understanding of Kusto Query Language (KQL) for detections, investigations, and reporting.

• Experience with automation and scripting using PowerShell, Logic Apps, APIs, or workflow orchestration tools.

• Good understanding of Azure, networking, cloud technologies, identity management, and Windows/Linux operating systems.

• Proven ability to troubleshoot technical issues across security platforms, data pipelines, and integrations.

• Experience working with source control,documentation standards, and change management processes.

Desirable Skills

• Cribl administration, pipeline development, or log routing experience.
• Sentinel as Code and Infrastructure-as-Code experience.
• Azure DevOps and CI/CD pipeline implementation experience.
• Threat hunting and advanced detection engineering knowledge.
• Experience integrating third-party SaaS,cloud, or infrastructure audit logs into SIEM platforms.
• Exposure to large enterprise or managed security service environments.
• Interest in leveraging AI and automation to improve security operations.

Personal Attributes

• Strong analytical and problem-solving skills.
• Passion for automation and continuous improvement.
• Engineering-first mindset with a focus on scalability and efficiency.
• Effective communicator with strong documentation skills.
• Collaborative team player who can work across security, cloud, infrastructure, and operations teams.
• Self-motivated learner with a desire to expand expertise across modern security technologies.