SIEM ops: manage Splunk, Microsoft Sentinel, and Chronicle; ingest and normalize logs.
Security Data Lake: build/maintain infra moving telemetry to Snowflake/BigQuery/Databricks.
AI/Automation: automate Tier 1/2 SecOps tasks with AI agents.
Cross-Team Collaboration: coordinate with global teams and stakeholders.
Bridge SecOps and Data Eng: drive SIEM health and data lake transition.

🎯 Requirements

5+ years in Security Ops/Engineering focused on security data management and automation.
SIEM and SOAR Mastery: hands-on with Splunk, Sentinel, Elastic; SOAR such as XSOAR.
Cloud Data Warehousing: Snowflake, BigQuery, and/or Databricks; 50-100 TB/day scale a plus.
Programming: Python and Shell scripting.
Data Eng & Cloud Infra: cloud warehouse/lakehouse concepts; AWS/GCP/Azure; multi-cloud a plus.
AI Fluency: experience or strong inclination to use AI tools to enhance SecOps.
Nice to have: Kubernetes/EKS/GKE; Terraform/IaC; CI/CD security integrations.

Apply on employer's website

This employer gathers applications via their own applicant tracking system.

You will be redirected to an external application form.

Share job

Meet JobCopilot: Your Personal AI Job Hunter

Automatically Apply to Engineering Jobs. Just set your preferences and Job Copilot will do the rest — finding, filtering, and applying while you focus on what matters.

Activate JobCopilot