Engineer III – SIEM Integrations (Hybrid)
$120,000–$180,000 year
HybridManhattan, New York, United States
Job Summary
Evaluate, develop, and maintain data connectors and parsers to ingest security data from third-party products into CrowdStrike Next-Gen SIEM. Set up and maintain test environments to validate integrations, while troubleshooting issues to ensure reliable log ingestion. Collaborate with internal teams to define logging, error handling, and data normalization, and provide on-call support for critical production incidents. Work with customer success teams to resolve data ingestion issues and maintain technical documentation. This hybrid role requires visiting the NYC office twice weekly and involves designing out-of-the-box integrations for the global GDI team.
Required Qualifications
- Bachelor's or Master's degree in Computer Science or related field or equivalent work experience
- 6+ years of experience in cybersecurity and SIEM integrations
- Experience in developing data connectors or ingestion pipelines for SIEM platforms such as Splunk, Sentinel, Exabeam, QRadar etc.
- Experience in security data normalization schemas, parsing and data enrichment
- Experience in setting up and managing environments for security products such as Firewalls, IDS/IPS, EDR, CASB, Identity Security, Email Security etc.
- Experience with security events and its formats such as Syslog, CEF, LEEF, JSON, XML
- Working knowledge of log processing or shipping tools such as Cribl, Splunk forwarder, Azure monitoring agent, LogScale log collector etc.
- Working knowledge on cloud-native logging services such as AWS CloudWatch, Azure Monitor, or GCP Logging
- Proficiency in at least one programming language, preferably Python or Go
- Strong documentation, communication and customer interaction skills
- Proven experience utilizing AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency and drive business outcomes
- Candidates should be comfortable visiting the office twice a week once the development center is established
- This role will require the candidate to periodically undergo and pass additional background and fingerprint check(s) consistent with government customer requirements
Desired Qualifications
- Bachelor's degree, English major preferred
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.