SOC SIEM Platform Engineer - SIEM as Code (all humans)

Job summary

Build and operate a central SIEM platform supporting security operations across multiple countries and entities, advancing a scalable SIEM as Code/SOC as Code model. The role designs security telemetry pipelines and automates deployments, log-source onboarding, and integrations across cloud, on-premises, SaaS, and security platforms using Infrastructure as Code, version control, CI/CD, and testing. It also strengthens platform reliability, observability, and secure multi-tenancy.

Benefits

Qualifications

• Hands-on experience engineering or operating SIEM, security analytics, or large-scale logging platforms
• Strong understanding of security telemetry pipelines, including collection, parsing, normalization, and data models
• Experience with Infrastructure or Configuration as Code, Git, CI/CD, and automated deployments
• Practical scripting or programming skills and experience with APIs and system integrations
• Familiarity with cloud infrastructure, access controls, and secrets management
• Ability to troubleshoot complex systems and build for reliability and observability
• Professional fluency in English

Responsibilities

• Build, expand, and operate a central SIEM platform across multiple countries and entities
• Design scalable security telemetry ingestion, processing, and normalization architecture
• Implement SIEM as Code using version control, Infrastructure as Code, automated pipelines, and testing
• Automate log-source onboarding and integrations across cloud, on-premises, SaaS, and security platforms
• Monitor and troubleshoot data pipelines, performance, and availability
• Enable secure multi-tenancy while balancing shared capabilities with country and entity requirements
• Collaborate with detection engineering, SOC, and automation teams to simplify, standardize, and improve the platform

Skills

Languages

Industry

Relocation