Threat Detection & SIEM Engineer | Observability & EDR

HireTalent - Staffing & Recruiting Firm; California (MO); On-site; USD 120,000 - 170,000; Full time

Job summary

HireTalent - Staffing & Recruiting Firm is seeking an experienced Cybersecurity Engineer to helm SIEM administration, observability data pipelines, and endpoint protection strategies. You will manage enterprise security tools, analyze events, and support incident response while optimizing data flows for security operations.

The role requires hands-on experience with Elastic Search, Cribl, and modern security platforms.

Qualifications

• 3+ years of Elastic Search or comparable enterprise search administration.
• 2+ years Cribl observability and data pipeline solutions experience.
• 4+ years in malware analysis, threat intelligence, sandbox analysis, or related cybersecurity functions.
• 2+ years API integrations for telemetry collection and data exchange.
• 2+ years creating and optimizing ES|QL or similar queries for data analysis.

Responsibilities

• Administer and maintain Elastic Search or a comparable search and analytics platform.
• Configure, manage, and optimize Cribl observability and data pipelines.
• Monitor, investigate, and respond to security alerts from XDR, SIEM, and endpoints.
• Analyze malware, phishing emails, and suspicious files using sandbox environments.
• Support endpoint security and data protection initiatives using EDR/XDR technologies.
• Develop and optimize ES|QL or similar queries for data filtering and threat hunting.
• Implement and maintain API integrations for telemetry collection and data sharing.
• Collaborate with security operations teams to improve detection and incident response.
• Document configurations, procedures, and security recommendations.

Skills

EDR/XDR

SIEM

Threat Hunting

Malware Analysis

Phishing Investigation

API Integrations

Security Monitoring

Email Security

Endpoint Security

Data Pipelines

Education

Cribl Certified User

Tools

Elastic Search

Cribl

CrowdStrike Falcon

SecureWorks

Proofpoint

Abnormal Security

Job description

HireTalent - Staffing & Recruiting Firm is seeking an experienced Cybersecurity Engineer to helm SIEM administration, observability data pipelines, and endpoint protection strategies. You will manage enterprise security tools, analyze events, and support incident response while optimizing data flows for security operations.

The role requires hands-on experience with Elastic Search, Cribl, and modern security platforms.