SIEM Engineer II

Request Technology, LLC; Austin (TX); On-site; USD 110,000 - 140,000; Full time

Job summary

Request Technology, LLC is seeking a Security Engineer II in Austin, TX to lead SIEM implementation, optimization, and daily management. You will help ingest, normalize, and enrich security telemetry to support detection engineering, incident response, and security analytics.

The role emphasizes hands-on work with Google SecOps, Splunk, Exabeam, and Microsoft Sentinel, plus Cribl pipeline design and log onboarding.

Qualifications

• Bachelor’s degree or equivalent professional experience.
• 3–5 years IT/engineering with 2–3 years SIEM/logging/security analytics.
• Hands-on experience with SIEM platforms (Google SecOps/Chronicle, Splunk, Exabeam, Microsoft Sentinel).
• Experience with Cribl including pipeline config and log onboarding.

Responsibilities

• SIEM Platform Support: implement, administer, and optimize SIEM platform.
• Cribl Development: design and maintain Cribl pipelines for data routing and enrichment.
• Log Integration: build integrations for log sources via APIs, agents, syslog, cloud services.
• Detection Enablement: develop SIEM use cases, rules, and alerting logic.
• Dashboards & Reporting: create dashboards and reports for SOC operations and threat hunting.
• Documentation: document SIEM architecture, data flows, onboarding, and procedures.
• Data Quality Assurance: monitor data quality standards for telemetry.
• Cross-Team Collaboration: work with IT, Cloud, and App teams to onboard systems.
• Incident Support: assist during security incidents with investigation and analysis.
• Continuous Learning: stay current on SIEM tech and observability trends.

Skills

SIEM

Security analytics

Incident response

Threat hunting

Data quality

Education

Bachelor's degree or equivalent

Tools

Cribl

Splunk

Exabeam

Google SecOps/Chronicle

Microsoft Sentinel

Job description

LOCATION: AUSTIN, TX - 3 days on site

Looking for a Security Engineer with 3+ years SIEM logging security analytics, SIEM google, SecOps chronicle splunk

As a SIEM Engineer II, you will play a key role in the implementation, optimization, and day-to-day management of the Firm’s Security Information and Event Management (SIEM) platform. You’ll contribute to the ingestion, normalization, and enrichment of security telemetry while supporting detection engineering, incident response, and security analytics.

• SIEM Platform Support – Assist in the implementation, administration, and ongoing optimization of the Firm’s SIEM platform (e.g., Google Security Operations (SecOps), Splunk, Exabeam, Microsoft Sentinel).
• Cribl Development – Support the design and maintenance of Cribl pipelines, including data routing, filtering, enrichment, and performance optimization.
• Log Integration – Build and maintain integrations for standard and custom log sources using APIs, agents, syslog, and cloud-native logging services.
• Detection Enablement – Partner with Cybersecurity Operations to develop and refine SIEM use cases, correlation rules, and alerting logic.
• Dashboards & Reporting – Create and enhance dashboards, searches, and reports to support SOC (Security Operations Center) operations and threat hunting.
• Documentation – Contribute to documentation of SIEM architecture, data flows, onboarding processes, and operational procedures.
• Data Quality Assurance – Help establish and monitor data quality standards to ensure reliable and accurate telemetry.
• Cross-Team Collaboration – Work with IT, Cloud, and Application teams to onboard new systems and ensure proper logging coverage.
• Incident Support – Provide support during security incidents, assisting with investigation and analysis efforts.
• Continuous Learning – Stay current on SIEM technologies, security analytics, and observability trends to enhance capabilities.

Qualifications:

• Bachelor’s degree or equivalent professional experience required.
• Minimum of 3–5 years in IT or engineering, with at least 2–3 years focused on SIEM, logging, or security analytics.
• Hands-on experience working with SIEM platforms such as Google SecOps (Chronicle), Splunk, Exabeam, or Microsoft Sentinel.
• Experience working with Cribl, including pipeline configuration and log onboarding, preferred.