> Markdown version of [/jobs/ext/1308243-security-architect-siem-engineer](https://www.wearedevelopers.com/jobs/ext/1308243-security-architect-siem-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Architect - SIEM Engineer

- **Company:** SmartIMS Inc.
- **Location:** United States (Remote available)
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, ARM Architecture, Bash Shell, Software as a Service, Cloud Computing, Cyber Security, Linux, Python (Programming Language), Parsing, Security Information and Event Management, Systems Integration, Scripting, Cyber Threat Analysis, Information Technology
- **Published:** July 17, 2026
- **Apply:** https://www.dice.com/job-detail/36ae41ef-ce51-4793-97f7-755de20f0fa9

## About the Role

* Education: Bachelor''s Degree in an Information Technology or Information Security related field (8+ years of relevant work experience may be substituted in lieu of education)
 * 5+ years of experience support large IT environments and/or system deployments
 * Hands-on experience with Palo Alto Cortex, XSIAM, and Cortex XDR design, implementation, administration and operational support.
 * Experience engineering and supporting SIEM capabilities for multi-tenant environments and 24x7 Security Operations Center operations.
 * Experience developing and tuning detections, correlation rules, analytics, threat-hunting queries, dashboards, reporting and alert suppression logic.
 * Experience creating and managing complex playbooks
 * CRIBL Data Modeling, log pipeline design, parsing, normalization, enrichment, routing and ingestion.
 * Experience developing automation, integrations, playbooks and response workflows using scripting languages such as Python and Bash.
 * Experience onboarding and troubleshooting telemetry from cloud, endpoint, network, identity, SaaS, Linux, Windows and custom application sources.
 * Strong understanding of enterprise security architecture, incident response, networking, access control, secure system design and industry-standard cybersecurity frameworks.



## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker)
- [Tips and Tricks for Working with JSON](https://www.wearedevelopers.com/videos/1229-tips-and-tricks-for-working-with-json)
- [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java)
- [Better Together: Leveraging Your Observability Tools as a SIEM](https://www.wearedevelopers.com/videos/2118-better-together-leveraging-your-observability-tools-as-a-siem)
- [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker)

## Related Articles

- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)
- [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)