SIEM Engineer II: Detection & Analytics

SCIGON; Austin (TX); On-site; USD 149,000 - 166,000; Full time

Job summary

SCIGON is seeking a hands-on SIEM Engineer II to deepen expertise in SIEM platforms, contribute to data-driven detection capabilities, and manage day-to-day SIEM operations. You will collaborate with Cybersecurity Operations, IT, Infrastructure, Cloud, and Applications teams to onboard log sources, develop detections, and create dashboards that enhance visibility and response.

This role offers growth in security analytics and observability.

Qualifications

• Experience with SIEM platforms such as Google SecOps, Splunk, Exabeam, or Microsoft Sentinel.
• Hands-on experience with Cribl pipelines and log routing, enrichment, and performance optimization.
• Ability to onboard log sources via APIs, agents, syslog, and cloud-native logging services.
• Experience building dashboards, searches, and reports for SOC and threat hunting.
• Strong collaboration with IT, Cloud, and Application teams to ensure logging coverage.

Responsibilities

• Assist in the implementation, administration, and ongoing optimization of the SIEM platform.
• Develop and refine SIEM use cases, correlation rules, and alerting logic.
• Create and enhance dashboards, searches, and reports to support SOC activities.
• Contribute to SIEM architecture, data flows, onboarding processes, and procedures.
• Help establish and monitor data quality standards for telemetry.

Skills

SIEM platforms

Security analytics

Scripting/queries (SPL, KQL, Python)

Detection engineering

Incident response

Dashboards & reporting

Cross-team collaboration

Education

Bachelor’s degree or equivalent

Tools

Cribl

Job description

SCIGON is seeking a hands-on SIEM Engineer II to deepen expertise in SIEM platforms, contribute to data-driven detection capabilities, and manage day-to-day SIEM operations. You will collaborate with Cybersecurity Operations, IT, Infrastructure, Cloud, and Applications teams to onboard log sources, develop detections, and create dashboards that enhance visibility and response.

This role offers growth in security analytics and observability.