SIEM Engineer

Request Technology, LLC; Chicago (IL); On-site; USD 90,000 - 130,000; Full time

Job summary

Request Technology, LLC is seeking a security analytics specialist to support the firm’s SIEM platforms including Google SecOps Chronicle, Splunk, Exabeam, and Microsoft Sentinel in a fast‑paced IT environment.

You will design and optimize Cribl pipelines, onboard log sources via APIs, syslog, and cloud logging services, and create dashboards and alerts for SOC operations, collaborating with IT, Cloud, and App teams to ensure comprehensive visibility.

Qualifications

• 3-5 years in IT or engineering.
• 2-3 years focused on SIEM, logging, or security analytics.
• Hands-on experience with SIEM platforms such as Google SecOps (Chronicle), Splunk, Exabeam, or Microsoft Sentinel.
• Experience with Cribl, including pipeline configuration and log onboarding, preferred.
• Familiarity with integrating log sources using APIs, syslog, or agents.
• Experience building dashboards, alerts, and queries to support security monitoring and operations.
• Understanding of common log sources, including endpoint, network, identity, cloud, SaaS, and application logs.
• Ability to work effectively with cross-functional teams and communicate technical concepts clearly.
• Exposure to scripting or query languages (SPL, KQL, Python, Regex) and cloud platforms (AWS, Azure, GCP) is a plus.
• Strong analytical skills, attention to detail, and a proactive approach to learning and improvement.

Responsibilities

• Assist in the implementation, administration, and ongoing optimization of the Firm's SIEM platform (e.g., Google SecOps, Splunk, Exabeam, Microsoft Sentinel).
• Support the design and maintenance of Cribl pipelines, including data routing, filtering, enrichment, and performance optimization.
• Build and maintain integrations for standard and custom log sources using APIs, agents, syslog, and cloud-native logging services.
• Partner with Cybersecurity Operations to develop and refine SIEM use cases, correlation rules, and alerting logic.
• Create and enhance dashboards, searches, and reports to support SOC operations and threat hunting.
• Contribute to documentation of SIEM architecture, data flows, onboarding processes, and operational procedures.
• Help establish and monitor data quality standards to ensure reliable telemetry.
• Work with IT, Cloud, and Application teams to onboard new systems and ensure proper logging coverage.
• Provide support during security incidents, assisting with investigation and analysis efforts.
• Stay current on SIEM technologies, security analytics, and observability trends to enhance capabilities.

Skills

Cross-functional teamwork

Communication

Analytical thinking

Attention to detail

Proactive learning

Tools

Splunk

Exabeam

Google SecOps Chronicle

Microsoft Sentinel

Cribl

Job description

*We are unable to provide sponsorship for this role*

Qualifications

• 3-5 years in IT or engineering
• 2-3 years focused on SIEM, logging, or security analytics.
• Hands-on experience working with SIEM platforms such as Google SecOps (Chronicle), Splunk, Exabeam, or Microsoft Sentinel.
• Experience working with Cribl, including pipeline configuration and log onboarding, preferred.
• Familiarity with integrating log sources using APIs, syslog, or agents.
• Experience building dashboards, alerts, and queries to support security monitoring and operations.
• Understanding of common log sources, including endpoint, network, identity, cloud, SaaS (Software as a Service), and application logs.
• Ability to work effectively with cross-functional teams and communicate technical concepts clearly.
• Exposure to scripting or query languages (e.g., SPL, KQL, Python, Regex) and cloud platforms (Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform (GCP)) is a plus.
• Strong analytical skills, attention to detail, and a proactive approach to learning and improvement.

Responsibilities

• Assist in the implementation, administration, and ongoing optimization of the Firm's SIEM platform (e.g., Google Security Operations (SecOps), Splunk, Exabeam, Microsoft Sentinel).
• Support the design and maintenance of Cribl pipelines, including data routing, filtering, enrichment, and performance optimization.
• Build and maintain integrations for standard and custom log sources using APIs, agents, syslog, and cloud-native logging services.
• Partner with Cybersecurity Operations to develop and refine SIEM use cases, correlation rules, and alerting logic.
• Create and enhance dashboards, searches, and reports to support SOC (Security Operations Center) operations and threat hunting.
• Contribute to documentation of SIEM architecture, data flows, onboarding processes, and operational procedures.
• Help establish and monitor data quality standards to ensure reliable and accurate telemetry.
• Work with IT, Cloud, and Application teams to onboard new systems and ensure proper logging coverage.
• Provide support during security incidents, assisting with investigation and analysis efforts.
• Stay current on SIEM technologies, security analytics, and observability trends to enhance capabilities.