Senior SIEM Platform Engineer - Remote & Cloud (FedRAMP)

Coalfire Systems; Chicago (IL); On-site; USD 85,000 - 141,000; Full time

Benefits offered by this job

Flexible work model

Paid parental leave

Flexible time off

Certification reimbursement

Training reimbursement

Mental health support membership

Comprehensive insurance

Job summary

Coalfire is seeking a SIEM Platform Engineer to design, implement, operate, and enhance SIEM platforms in cloud and high-compliance environments. You will oversee data onboarding, normalization, and platform health while collaborating with detection engineering and security operations.

Ideal candidates bring hands-on SIEM administration experience, cloud proficiency (AWS/Azure/GCP), and strong automation skills with Terraform, Ansible, and Python. Remote-friendly with ~10% travel.

Qualifications

• Proven experience implementing SIEM/logging platforms in enterprise/cloud/high-compliance environments.
• Experience delivering platform capabilities from requirements to handoff and documentation.
• Ability to integrate multiple security, cloud, endpoint, and network tools into a cohesive monitoring platform.

Responsibilities

• Design and maintain SIEM architectures across AWS, Azure, and GCP.
• Build and operate reliable log collection/ingestion pipelines and connectors.
• Onboard and normalize data sources from diverse systems; maintain data models.
• Implement platform standards for parsing, retention, and access controls.
• Develop IaC and automation using Terraform, Ansible, GitLab/GitHub, Python.
• Support FedRAMP continuous monitoring and compliance through docs and procedures.

Skills

SIEM platforms

Cloud architecture

Infrastructure as code

Log ingestion

Python scripting

Education

Bachelor's degree in IT / CS / cybersecurity

Tools

Splunk

Microsoft Sentinel

Elastic

Sumo Logic

Terraform

Ansible

GitLab / GitHub

Job description

Coalfire is seeking a SIEM Platform Engineer to design, implement, operate, and enhance SIEM platforms in cloud and high-compliance environments. You will oversee data onboarding, normalization, and platform health while collaborating with detection engineering and security operations.

Ideal candidates bring hands-on SIEM administration experience, cloud proficiency (AWS/Azure/GCP), and strong automation skills with Terraform, Ansible, and Python. Remote-friendly with ~10% travel.