Security Data Engineer: FortiSIEM Detections & Integrations

Fortinet Inc.; Sunnyvale (CA); On-site; USD 123,000 - 151,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Life insurance

Disability insurance

401(k)

Paid holidays

Vacation time

Sick time

Leave program

Job summary

Fortinet Inc. in Sunnyvale seeks a software engineer for the FortiSIEM Advanced Threat Integration team, blending hands-on development with security detection engineering to ingest and normalize telemetry, build parsers, and develop detection content.

You will work with Python, Linux, and Git/GitLab, creating detections, rules, and integrations while collaborating across a distributed team.

This is a full-time role with a US base salary and comprehensive benefits.

Qualifications

• BS in Computer Science, Computer Engineering, Cybersecurity, or related field or equivalent experience.
• 3+ years software engineering with BS; 2+ years with MS.
• Strong Python programming skills and data handling capabilities.
• Experience parsing logs, regex and handling untrusted data efficiently.
• Solid fundamentals in algorithms, data structures, and OOP.
• Linux expertise and ability to use Git/GitLab in a team setting.
• Ability to translate logs/docs into reliable software and detections.

Responsibilities

• Analyze raw security and audit logs to understand structure and fields.
• Build and maintain FortiSIEM log parsers for normalized event data.
• Create and update security rules, reports, dashboards, and content.
• Research vendor docs and logs to support new integrations.
• Develop lightweight integrations using Python, regex, APIs, scripting.
• Test parsers, rules, and integrations with real log samples.
• Work in Linux and use Git/GitLab for source control and reviews.
• Collaborate with developers, QA, support, and researchers to release content.

Skills

Python

Regex

Linux

Git/GitLab

Data parsing

Detection engineering

Debugging

Team collaboration

Education

BS in Computer Science or related field

Tools

Git/GitLab

Python

REST APIs

Job description

Fortinet Inc. in Sunnyvale seeks a software engineer for the FortiSIEM Advanced Threat Integration team, blending hands-on development with security detection engineering to ingest and normalize telemetry, build parsers, and develop detection content.

You will work with Python, Linux, and Git/GitLab, creating detections, rules, and integrations while collaborating across a distributed team.

This is a full-time role with a US base salary and comprehensive benefits.