SIEM Integrator

About the role

The SIEM Integrator owns the end-to-end integration of log sources, security tools, and data pipelines into the organization's SIEM platform. This role is responsible for onboarding new data sources, building and tuning correlation rules and use cases, and ensuring the SIEM ecosystem is reliable, scalable, and aligned with detection and compliance requirements.

What you'll do

• Lead the design, deployment, and lifecycle management of SIEM integrations across on-prem, cloud, and hybrid environments
• Define and prioritize the SIEM onboarding roadmap in collaboration with SOC leadership, IT, and application owners
• Build, tune, and maintain correlation rules, parsers, use cases, and dashboards to improve detection coverage and reduce false positives
• Ensure log source health, data quality, and pipeline reliability through monitoring, alerting, and periodic audits
• Partner with detection engineering and SOC analysts to translate threat scenarios into actionable SIEM content

What you need

• 5–9 yrs of experience
• SIEM
• Splunk
• Python
• Networking
• PowerShell
• Compliance
• Any graduate

Good to have

• ISO 27001
• SOX
• ETL