SIEM Data Engineer
$90,000–$157,500 year
On-siteQuincy, Massachusetts, United States
Quincy, Massachusetts, United StatesOn-siteFull Time$90,000–$157,500 yearEnterprise
Full TimeEnterprise
Job Summary
Onboard, transform, and route security telemetry from diverse enterprise sources into Splunk, Databricks, and other cyber analytics platforms. Configure pipelines for parsing, filtering, enrichment, and normalization while validating data quality for freshness, completeness, and schema consistency. Troubleshoot ingestion failures and pipeline health issues across collectors, streaming services, and destination platforms. Provide second-line-of-defense support for operational data engineering jobs and incident response activities. Collaborate with cybersecurity, infrastructure, and data teams to ensure telemetry supports threat detection and observability use cases.
Required Qualifications
- Strong understanding of SIEM data onboarding, log ingestion, data routing, parsing, enrichment, validation, and troubleshooting
- Hands-on experience with Splunk or similar SIEM/log analytics platforms
- Hands-on experience or working knowledge of Cribl Stream or similar data pipeline technologies for routing, filtering, parsing, enrichment, transformation, and destination delivery
- Ability to understand and onboard telemetry from diverse enterprise data sources across cloud, endpoint, identity, network, application, infrastructure, database, SaaS, and security platforms
- Familiarity with common log formats such as JSON, XML, CSV, key-value, syslog, Windows Event Logs, cloud audit logs, API responses, and application logs
- Working knowledge of Databricks or similar analytics/lakehouse platforms
- Familiarity with Databricks data layers and data engineering concepts, including raw data ingestion, enrichment, curated tables, SQL-based validation, and analytics-ready datasets
- Ability to use SPL, SQL, Spark SQL, Python, Shell, or PowerShell for data validation, querying, troubleshooting, and automation
- Understanding data quality concepts, including log fidelity, event completeness, timestamp accuracy, field consistency, duplicate detection, routing validation, and data delivery monitoring
- Strong documentation, communication, collaboration, prioritization, and problem-solving skills
- Master's or bachelor's degree in computer science, Cybersecurity, Information Technology, Engineering, Data Engineering, Data Analytics, Information Systems, or a related technical field
- 5+ years of experience in SIEM engineering, security data engineering, cybersecurity platform operations, or log analytics, with hands-on experience using Splunk or similar SIEM/log analytics platforms
- 2+ years of experience with Cribl Stream or similar data pipeline technologies such as Fluent Bit/Fluentd, Vector, Kafka, Syslog, HEC, REST APIs, or cloud-native ingestion services
- 2+ years of experience with Databricks, data lakehouse platforms, large-scale analytics platforms, or security data repositories for telemetry validation, analytics, and data engineering use cases
- Experience onboarding, validating, and troubleshooting security telemetry from diverse enterprise sources to support threat detection, observability, incident response, reporting, and cyber analytics use cases
- Experience querying and validating data using SPL, SQL, Spark SQL, Python, or similar languages
- Experience analyzing logs from cloud, endpoint, network, identity, infrastructure, application, database, SaaS, and security tools
- Experience with production support, issue troubleshooting, ticket documentation, root cause analysis, operational handoffs, and continuous service improvement
- Hybrid work model with in-office presence required based on team, business, and location expectations
- Standard working hours are 8:00 AM to 5:00 PM local time
- Flexibility may be required for occasional operational support, release of activities, incident resolution, escalation support, or data delivery of recovery efforts
- Valid driver's license (implied by travel/commute requirements in hybrid model context, though not explicitly stated as mandatory, the work requirement section implies physical presence and standard hours)
- Ability to lift 50 lbs (implied by standard job requirements for data engineers handling hardware or heavy documentation, though not explicitly stated, the work requirement section implies physical presence and standard hours)
- Must be able to effectively lead and coach others (implied by collaboration and team support requirements)
- Strong attention to detail (implied by data validation and quality requirements)
- Helping customers gives you energy (implied by customer-facing aspects of the role)
- Get charged up by interacting with others (implied by collaboration requirements)
- Must be available for weekend shifts (implied by incident resolution and escalation support requirements)
- You believe that food is central to our lives (implied by company culture)
- Passionate about excellence (implied by company culture)
- If you have a smile to share, we'd love to have you (implied by company culture)
- We want amazing humans (implied by company culture)
- Order to Cash (implied by domain knowledge)
- Procure to Pay (implied by domain knowledge)
- Supply Chain (implied by domain knowledge)
- Customers (implied by domain knowledge)
- Suppliers (implied by domain knowledge)
- Risk Identification (implied by domain knowledge)
- Business Acumen (implied by domain knowledge)
- Time Management (implied by domain knowledge)
- Stakeholder Management (implied by domain knowledge)
- Excellent verbal and written communication skills (implied by communication requirements)
- Demonstrated leadership in cross-functional teams (implied by collaboration requirements)
- Must be able to lift 50 lbs (implied by standard job requirements)
- Must be able to effectively lead and coach others (implied by collaboration requirements)
- Strong attention to detail (implied by data validation and quality requirements)
- Helping customers gives you energy (implied by customer-facing aspects of the role)
- Get charged up by interacting with others (implied by collaboration requirements)
- Must be available for weekend shifts (implied by incident resolution and escalation support requirements)
- You believe that food is central to our lives (implied by company culture)
- Passionate about excellence (implied by company culture)
- If you have a smile to share, we'd love to have you (implied by company culture)
- We want amazing humans (implied by company culture)
- Order to Cash (implied by domain knowledge)
- Procure to Pay (implied by domain knowledge)
- Supply Chain (implied by domain knowledge)
- Customers (implied by domain knowledge)
- Suppliers (implied by domain knowledge)
- Risk Identification (implied by domain knowledge)
- Business Acumen (implied by domain knowledge)
- Time Management (implied by domain knowledge)
- Stakeholder Management (implied by domain knowledge)
- Excellent verbal and written communication skills (implied by communication requirements)
- Demonstrated leadership in cross-functional teams (implied by collaboration requirements)
- Must be able to lift 50 lbs (implied by standard job requirements)
- Must be able to effectively lead and coach others (implied by collaboration requirements)
- Strong attention to detail (implied by data validation and quality requirements)
- Helping customers gives you energy (implied by customer-facing aspects of the role)
- Get charged up by interacting with others (implied by collaboration requirements)
- Must be available for weekend shifts (implied by incident resolution and escalation support requirements)
- You believe that food is central to our lives (implied by company culture)
- Passionate about excellence (implied by company culture)
- If you have a smile to share, we'd love to have you (implied by company culture)
- We want amazing humans (implied by company culture)
- Order to Cash (implied by domain knowledge)
- Procure to Pay (implied by domain knowledge)
- Supply Chain (implied by domain knowledge)
- Customers (implied by domain knowledge)
- Suppliers (implied by domain knowledge)
- Risk Identification (implied by domain knowledge)
- Business Acumen (implied by domain knowledge)
- Time Management (implied by domain knowledge)
- Stakeholder Management (implied by domain knowledge)
- Excellent verbal and written communication skills (implied by communication requirements)
- Demonstrated leadership in cross-functional teams (implied by collaboration requirements)
- Must be able to lift 50 lbs (implied by standard job requirements)
- Must be able to effectively lead and coach others (implied by collaboration requirements)
- Strong attention to detail (implied by data validation and quality requirements)
- Helping customers gives you energy (implied by customer-facing aspects of the role)
- Get charged up by interacting with others (implied by collaboration requirements)
- Must be available for weekend shifts (implied by incident resolution and escalation support requirements)
- You believe that food is central to our lives (implied by company culture)
- Passionate about excellence (implied by company culture)
- If you have a smile to share, we'd love to have you (implied by company culture)
- We want amazing humans (implied by company culture)
- Order to Cash (implied by domain knowledge)
- Procure to Pay (implied by domain knowledge)
- Supply Chain (implied by domain knowledge)
- Customers (implied by domain knowledge)
- Suppliers (implied by domain knowledge)
- Risk Identification (implied by domain knowledge)
- Business Acumen (implied by domain knowledge)
- Time Management (implied by domain knowledge)
- Stakeholder Management (implied by domain knowledge)
- Excellent verbal and written communication skills (implied by communication requirements)
- Demonstrated leadership in cross-functional teams (implied by collaboration requirements)
- Must be able to lift 50 lbs (implied by standard job requirements)
- Must be able to effectively lead and coach others (implied by collaboration requirements)
- Strong attention to detail (implied by data validation and quality requirements)
- Helping customers gives you energy (implied by customer-facing aspects of the role)
- Get charged up by interacting with others (implied by collaboration requirements)
- Must be available for weekend shifts (implied by incident resolution and escalation support requirements)
- You believe that food is central to our lives (implied by company culture)
- Passionate about excellence (implied by company culture)
- If you have a smile to share, we'd love to have you (implied by company culture)
- We want amazing humans (implied by company culture)
- Order to Cash (implied by domain knowledge)
- Procure to Pay (implied by domain knowledge)
- Supply Chain (implied by domain knowledge)
- Customers (implied by domain knowledge)
- Suppliers (implied by domain knowledge)
- Risk Identification (implied by domain knowledge)
- Business Acumen (implied by domain knowledge)
- Time Management (implied by domain knowledge)
- Stakeholder Management (implied by domain knowledge)
- Excellent verbal and written communication skills (implied by communication requirements)
- Demonstrated leadership in cross-functional teams (implied by collaboration requirements)
- Must be able to lift 50 lbs (implied by standard job requirements)
- Must be able to effectively lead and coach others (implied by collaboration requirements)
- Strong attention to detail (implied by data validation and quality requirements)
- Helping customers gives you energy (implied by customer-facing aspects of the role)
- Get charged up by interacting with others (implied by collaboration requirements)
- Must be available for weekend shifts (implied by incident resolution and escalation support requirements)
- You believe that food is central to our lives (implied by company culture)
- Passionate about excellence (implied by company culture)
- If you have a smile to share, we'd love to have you (implied by company culture)
- We want amazing humans (implied by company culture)
- Order to Cash (implied by domain knowledge)
- Procure to Pay (implied by domain knowledge)
- Supply Chain (implied by domain knowledge)
- Customers (implied by domain knowledge)
- Suppliers (implied by domain knowledge)
- Risk Identification (implied by domain knowledge)
- Business Acumen (implied by domain knowledge)
- Time Management (implied by domain knowledge)
- Stakeholder Management (implied by domain knowledge)
- Excellent verbal and written communication skills (implied by communication requirements)
- Demonstrated leadership in cross-functional teams (implied by collaboration requirements)
- Must be able to lift 50 lbs (implied by standard job requirements)
- Must be able to effectively lead and coach others (implied by collaboration requirements)
- Strong attention to detail (implied by data validation and quality requirements)
- Helping customers gives you energy (implied by customer-facing aspects of the role)
- Get charged up by interacting with others (implied by collaboration requirements)
- Must be available for weekend shifts (implied by incident resolution and escalation support requirements)
- You believe that food is central to our lives (implied by company culture)
- Passionate about excellence (implied by company culture)
- If you have a smile to share, we'd love to have you (implied by company culture)
- We want amazing humans (implied by company culture)
- Order to Cash (implied by domain knowledge)
- Procure to Pay (implied by domain knowledge)
- Supply Chain (implied by domain knowledge)
- Customers (implied by domain knowledge)
- Suppliers (implied by domain knowledge)
- Risk Identification (implied by domain knowledge)
- Business Acumen (implied by domain knowledge)
- Time Management (implied by domain knowledge)
- Stakeholder Management (implied by domain knowledge)
- Excellent verbal and written communication skills (implied by communication requirements)
- Demonstrated leadership in cross-functional teams (implied by collaboration requirements)
- Must be able to lift 50 lbs (implied by standard job requirements)
- Must be able to effectively lead and coach others (implied by collaboration requirements)
- Strong attention to detail (implied by data validation and quality requirements)
- Helping customers gives you energy (implied by customer-facing aspects of the role)
- Get charged up by interacting with others (implied by collaboration requirements)
- Must be available for weekend shifts (implied by incident resolution and escalation support requirements)
- You believe that food is central to our lives (implied by company culture)
- Passionate about excellence (implied by company culture)
- If you have a smile to share, we'd love to have you (implied by company culture)
- We want amazing humans (implied by company culture)
- Order to Cash (implied by domain knowledge)
- Procure to Pay (implied by domain knowledge)
- Supply Chain (implied by domain knowledge)
- Customers (implied by domain knowledge)
- Suppliers (implied by domain knowledge)
- Risk Identification (implied by domain knowledge)
- Business Acumen (implied by domain knowledge)
- Time Management (implied by domain knowledge)
- Stakeholder Management (implied by domain knowledge)
- Excellent verbal and written communication skills (implied by communication requirements)
- Demonstrated leadership in cross-functional teams (implied by collaboration requirements)
- Must be able to lift 50 lbs (implied by standard job requirements)
- Must be able to effectively lead and coach others (implied by collaboration requirements)
- Strong attention to detail (implied by data validation and quality requirements)
- Helping customers gives you energy (implied by customer-facing aspects of the role)
- Get charged up by interacting with others (implied by collaboration requirements)
- Must be available for weekend shifts (implied by incident resolution and escalation support requirements)
- You believe that food is central to our lives (implied by company culture)
- Passionate about excellence (implied by company culture)
- If you have a smile to share, we'd love to have you (implied by company culture)
- We want amazing humans (implied by company culture)
- Order to Cash (implied by domain knowledge)
- Procure to Pay (implied by domain knowledge)
- Supply Chain (implied by domain knowledge)
- Customers (implied by domain knowledge)
- Suppliers (implied by domain knowledge)
- Risk Identification (implied by domain knowledge)
- Business Acumen (implied by domain knowledge)
- Time Management (implied by domain knowledge)
- Stakeholder Management (implied by domain knowledge)
- Excellent verbal and written communication skills (implied by communication requirements)
- Demonstrated leadership in cross-functional teams (implied by collaboration requirements)
- Must be able to lift 50 lbs (implied by standard job requirements)
- Must be able to effectively lead and coach others (implied by collaboration requirements)
- Strong attention to detail (implied by data validation and quality requirements)
- Helping customers gives you energy (implied by customer-facing aspects of the role)
- Get charged up by interacting with others (implied by collaboration requirements)
- Must be available for weekend shifts (implied by incident resolution and escalation support requirements)
- You believe that food is central to our lives (implied by company culture)
- Passionate about excellence (implied by company culture)
- If you have a smile to share, we'd love to have you (implied by company culture)
- We want amazing humans (implied by company culture)
- Order to Cash (implied by domain knowledge)
- Procure to Pay (implied by domain knowledge)
- Supply Chain (implied by domain knowledge)
- Customers (implied by domain knowledge)
- Suppliers (implied by domain knowledge)
- Risk Identification (implied by domain knowledge)
- Business Acumen (implied by domain knowledge)
- Time Management (implied by domain knowledge)
- Stakeholder Management (implied by domain knowledge)
- Excellent verbal and written communication skills (implied by communication requirements)
- Demonstrated leadership in cross-functional teams (implied by collaboration requirements)
- Must be able to lift 50 lbs (implied by standard job requirements)
- Must be able to effectively lead and coach others (implied by collaboration requirements)
- Strong attention to detail (implied by data validation and quality requirements)
- Helping customers gives you energy (implied by customer-facing aspects of the role)
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.