Senior SIEM Platform Engineer — Remote

Coalfire Systems; Chicago (IL); On-site; USD 85,000 - 141,000; Full time

Benefits offered by this job

Paid parental leave

Certification and training reimburse

Flexible time off

Digital mental health support

Job summary

Coalfire Systems is seeking a Senior SIEM Platform Engineer to design, implement, operate, and continuously improve SIEM platforms across cloud environments. You will ensure reliable log collection, data onboarding, and governance for secure, compliant operations in FedRAMP and other high‑security contexts.

The role collaborates with detection engineering, security operations, and cloud teams to deliver scalable security data solutions, with remote work options and travel ~10% for client needs.

Qualifications

• Experience implementing SIEM in enterprise, cloud, or high‑compliance environments.
• Ability to design, deploy, and operate SIEM platforms across multi‑cloud ecosystems.
• Proven track record of data onboarding, parsing, and retention configurations.

Responsibilities

• Design, implement, and maintain SIEM platform architectures across AWS, Azure, and GCP environments.
• Build and operate reliable log collection and ingestion pipelines.
• Onboard, normalize, validate, and troubleshoot data sources from cloud platforms and other systems.
• Establish platform standards for parsing, data models, and retention.
• Perform SIEM platform administration including upgrades and capacity planning.
• Develop and maintain IaC and deployment workflows (Terraform, Ansible, GitLab/GitHub, Python).
• Monitor platform health, detect ingestion gaps, and address data quality issues.
• Integrate SIEM with endpoint, identity, vulnerability management, threat intel, and ITSM tools.

Skills

SIEM platforms

Log collection

Cloud integration

Automation

Infrastructure as code

Education

Bachelor’s degree in IT / CS

Tools

Terraform

Ansible

GitLab

GitHub

Python

Job description

Coalfire Systems is seeking a Senior SIEM Platform Engineer to design, implement, operate, and continuously improve SIEM platforms across cloud environments. You will ensure reliable log collection, data onboarding, and governance for secure, compliant operations in FedRAMP and other high‑security contexts.

The role collaborates with detection engineering, security operations, and cloud teams to deliver scalable security data solutions, with remote work options and travel ~10% for client needs.