Senior SIEM Engineer - (NPW)

About the role

The Senior SIEM Engineer will be responsible for onboarding and operationalizing prioritized security telemetry into Elastic Security , including creation and maintenance of data streams, ingest pipelines, index templates, field mappings, ECS normalization, and detection rules . The role requires strong hands-on experience in Elastic SIEM engineering, security log ingestion, parsing, detection engineering, and working with SOC/security monitoring teams.

What you'll do

• Assess security log sources for onboarding readiness, including connectivity, log format, volume, collection method, parsing needs, data quality, field availability
• Design, configure, test, and maintain Elastic data streams , index templates, component templates, mappings, naming conventions, lifecycle policies
• Develop and maintain Elastic ingest pipelines to parse, enrich, transform, and normalize security events
• Map source fields to Elastic Common Schema (ECS) or approved security data models
• Validate end-to-end telemetry ingestion into Elastic, including timestamp accuracy, parsing success, field extraction, mapping conflicts, duplicate events, data loss

What you need

• SIEM
• Elasticsearch

Good to have

• Firewalls
• JIRA
• Confluence