Senior SIEM Platform Engineer – Remote Cloud Security

Coalfire

Chicago (IL)

On-site

USD 85,000 - 141,000

Full time

7 days ago

Be an early applicant

Application generator

Stand out for this role — generate a tailored resume and cover letter in about a minute.

Get past ATS filters

Job summary

Coalfire is seeking a Senior SIEM Engineer to design, implement, and operate SIEM platforms across AWS, Azure, and GCP, ensuring reliable log collection, data quality, and regulatory compliance. The role partners with detection engineering, security operations, and client stakeholders to deliver governed, scalable security data.

You will automate deployment, maintain platform health, and contribute to roadmaps while supporting FedRAMP monitoring and client engagements.

Qualifications

Experience designing and operating SIEM/platforms in enterprise or regulated environments.
Ability to implement data onboarding, parsing, and retention workflows.
Experience with automation, IaC, and cloud integrations.

Responsibilities

Design, implement, and maintain SIEM platform architectures across AWS, Azure, and GCP.
Build and operate reliable log collection, ingestion pipelines, and connectors.
Onboard and validate data sources from clouds, OS, apps, and devices.
Maintain platform standards for parsing, data models, and access controls.
Administer SIEM platforms including upgrades, capacity, and monitoring.
Develop IaC and deployment workflows with Terraform, Ansible, and Python.
Implement monitoring to detect ingestion gaps and data quality issues.
Support FedRAMP continuous monitoring and compliance requirements.
Collaborate with detection engineering, security ops, and clients.
Prepare technical docs, diagrams, and runbooks; participate in client meetings.