SIEM Engineer- W-2 ONLY

United Global Technologies, Inc.; Columbia (SC); On-site; USD 110,000 - 170,000; Full time

Job summary

United Global Technologies, Inc. in Columbia, SC is seeking an experienced security engineer to support SIEM architecture and 24x7 SOC operations. The role requires hands-on work with Cortex XSIAM/XDR, Cribl, and multi-tenant environments, plus scripting for automation and incident response.

Strong foundation in security architecture and networking is expected. The position may involve on-site work in Columbia, SC, with responsibilities spanning design, deployment, and ongoing operational

Qualifications

• Bachelor's degree in an information technology or information security related field.
• Eight years of relevant work experience may be substituted in lieu of education.
• Five years of experience in supporting large IT environments and/or system deployments.

Skills

SIEM design

Cortex XSIAM/XDR

SOC operations

Cribl data

Automation scripting

Python

Bash

Telemetry onboarding

Security architecture

Incident response

Networking

Education

Bachelor's degree in IT or information security

Job description

W-2 ONLY NO SUBS, NO Sponsorship

New engineering role directly supporting SIEM architecture and 24x7 SOC operations.

Required

• Bachelor's degree in an information technology or information security related field
• Eight years of relevant work experience may be substituted in lieu of education
• Five years of experience in supporting large it environments and/or system deployments

Required Skills

• 5+ years of experience in supporting large IT environments and/or system deployments
• Palo Alo Cortex XSIAM and Cortex XDR Design, implementation, administration, and operational support
• Experience engineering and supporting SIEM capabilities for multi-tenant environments and 24x7 Security Operations Center operations
• CRIBL Data Modeling, Log Pipeline Design, Parsing, Normalization, Enrichment, Routing and Ingestion experience
• Experience developing automation, integrations, playbooks and response workflows using scripting languages such as Python and Bash
• Experience onboarding and troubleshooting telemetry from cloud, endpoint, network, identity, SaaS, Linux, Windows and custom application sources
• Enterprise security architecture, incident response, networking, access control, secure system design and industry-standard cybersecurity frameworks

Preferred

• CISSP, security+ or GIAC certification
• Palo alto cortex, cribl or another relevant siem/security platform cert.