Senior SIEM Engineer: Data Pipelines & DevOps

Infinitive Inc; Ashburn (GA); On-site; USD 90,000 - 140,000; Full time

Job summary

Infinitive is seeking a highly skilled SIEM Engineer to support a cybersecurity operations team. You will be responsible for building, optimizing, and maintaining the data pipelines that power our security monitoring infrastructure, focusing on data ingestion, log parsing, and data transformation to ensure high-fidelity data reaches analytics platforms.

The ideal candidate bridges the gap between Security Operations and DevOps, leveraging modern CI/CD practices to manage infrastructure-as-code

Qualifications

• Logstash expertise with plugin configurations and Regex-based data parsing.
• Experience with version control (GitHub) and deployment pipelines (Jenkins or similar CI/CD tools).
• Strong understanding of big data concepts and data transformation patterns.
• Experience with Amazon SQS and Amazon SNS for cloud messaging.
• Proficiency in Splunk for reading logs, diagnosing errors, and validating data ingestion.
• Solid SQL querying skills for data validation and reporting.
• 3+ years of experience in Security Engineering, Data Engineering, or a DevSecOps role.
• Strong analytical and troubleshooting abilities and agile teamwork.

Responsibilities

• Log Ingestion & Parsing: Design, develop, and maintain Logstash pipelines and write Regex for parsing and enrichment.
• Data Architecture & Engineering: Build scalable source-to-target data pipelines across security sources.
• Event-Driven Systems: Manage data flow with cloud-native messaging (AWS SQS/SNS).
• CI/CD & Version Control: Treat SIEM configurations as code with GitHub and automate testing/deployment via Jenkins or similar tools.
• SIEM Analysis & Troubleshooting: Analyze log data in Splunk, audit data quality, and resolve parsing errors.
• Database Querying: Write SQL queries for data validation and reporting.

Skills

Logstash

GitHub

Jenkins

Splunk

SQL

AWS SQS/SNS

Regex

CI/CD tools

Tools

Logstash

GitHub

Jenkins

Splunk

SQL

Job description

Infinitive is seeking a highly skilled SIEM Engineer to support a cybersecurity operations team. You will be responsible for building, optimizing, and maintaining the data pipelines that power our security monitoring infrastructure, focusing on data ingestion, log parsing, and data transformation to ensure high-fidelity data reaches analytics platforms.

The ideal candidate bridges the gap between Security Operations and DevOps, leveraging modern CI/CD practices to manage infrastructure-as-code