SIEM Monitoring Engineer

Bosal; Santiago de Querétaro; On-site; MXN 600,000 - 900,000; Full time

Job summary

BOSAL is seeking a SIEM Monitoring Engineer in Querétaro, Mexico, to build and operate centralized security monitoring and incident detection capabilities. You will design and implement a SIEM platform from scratch, ensuring effective detection and response across the IT landscape.

You will onboard logs from Palo Alto firewalls, Cisco devices, Windows/Linux servers, cloud services, and identity platforms; develop detection rules; document incident response workflows; and continuously improve

Qualifications

• 4+ years in security operations or SOC roles.
• Experience building or extending SIEM platforms.
• Experience with incident response processes.
• Experience with Windows logging.
• Experience with Linux logging.
• Knowledge of network and firewall logging concepts.
• Relevant certifications are considered assets.

Responsibilities

• Design, build and operate a SIEM platform (e.g., Microsoft Sentinel or equivalent).
• Onboard and normalize logs from various sources (firewalls, switches, servers, SaaS apps).
• Define, prioritize and maintain detection use cases aligned with risk.
• Develop and maintain detection rules and use cases.
• Design and document incident response workflows and playbooks.
• Correlate incidents with asset criticality and vulnerability data.
• Support TISAX evidence for monitoring, logging and incident handling.
• Continuously improve detection coverage and reduce false positives.
• Ensure monitoring and incident response are audit-ready.

Skills

SIEM platforms (Sentinel, Splunk)

Log ingestion & parsing

Security monitoring & detection

Windows logging

Linux logging

Network & firewall logging

Certifications as asset

Tools

Sentinel

Splunk

Job description

BOSAL is a Dutch privately owned company, mainly known as a global Tier 1 automotive supplier, in business since 1923. We employ about 2200 people in 16 production facilities of which the largest ones are situated in Czechia, Mexico, Turkey, Brasil, US and South Africa. Our corporate research center is based in Belgium, next to that we run 5 other R&D satellites worldwide.

Currently we are looking for a SIEM Monitoring Engineer in Querétaro (Mexico):

As a SIEM Monitoring Engineer, you are responsible for building and operating centralized security monitoring and incident detection capabilities. You design and implement a SIEM platform from scratch and ensure effective detection and response across the organization’s IT landscape.

Your responsibilities:

• Designing, implementing, and operating a SIEM platform (e.g. Microsoft Sentinel or equivalent).
• Onboarding and normalizing logs from: Palo Alto firewalls and Prisma Access. Cisco switches, WLC's, ISE, and Catalyst Center. Windows and Linux servers. Microsoft 365 and identity services. Critical applications and SaaS platforms
• Defining, prioritizing and maintaining detection use cases aligned with asset criticality and risk.
• Developing and maintaining detection rules and use cases.
• Designing and documenting incident response workflows and playbooks.
• Correlating incidents with asset criticality and vulnerability and exposure data.
• Supporting TISAX evidence for monitoring, logging and incident handling.
• Continuously improving detection coverage and reducing false positives.
• Ensuring monitoring and incident response capabilities are demonstrably effective and audit-ready.

Your profile:

Skills:

• Experience with SIEM platforms, such as Sentinel, Splunk or similar.
• Strong knowledge of log ingestion and parsing (syslog, API's).
• Expertise in security monitoring and detection engineering.
• Experience with Windows and Linux logging.
• Knowledge of network and firewall logging concepts.
• Relevant certifications are considered as an asset.

Experience:

• 4+ years in security operations or SOC-related roles.
• Experience building or significantly extending SIEM platforms.
• Experience with incident response processes.

Do you have an entrepreneurial mindset and do you want to invest in your career? Then we offer an inspiring job in an unique environment with an interesting remuneration package with additional benefits.