> Markdown version of [/jobs/ext/1323479-siem-engineer](https://www.wearedevelopers.com/jobs/ext/1323479-siem-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # SIEM Engineer - **Company:** Systemtec, Inc. - **Location:** United States (Remote available) - **Experience:** Expert - **Salary:** $180,960.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Data Analysis, ARM Architecture, Bash Shell, Software as a Service, Cloud Computing, CompTIA Security+, Cyber Security, Linux, Identity and Access Management, Intrusion Detection and Prevention, Python (Programming Language), Parsing, Performance Tuning, Runbook, Security Information and Event Management, Systems Integration, Scripting, Cyber Threat Analysis, Information Technology, Cybercrime, 3-tier Architectures, Security Orchestration, Automation & Response - **Published:** July 17, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=47d7115690185e91 ## About the Role * Applicants must be authorized to work for any employer in the U.S. We are unable to provide sponsorship or work with Third-Party agencies. * Bachelor's degree in Information Technology, Information Security, Cybersecurity, or a related field (8+ years of relevant experience may be substituted for a degree). * Minimum of five years of experience supporting large enterprise IT environments and/or enterprise technology deployments. * Hands-on experience designing, implementing, administering, and supporting Palo Alto Cortex XSIAM and Cortex XDR. * Experience engineering and supporting enterprise SIEM platforms within multi-tenant environments and 24x7 Security Operations Centers. * Strong experience developing and tuning detections, correlation rules, analytics, threat hunting queries, dashboards, and alert suppression logic. * Experience with Cribl data modeling, log pipeline design, parsing, normalization, enrichment, routing, and ingestion. * Experience creating security automation, integrations, and playbooks using scripting languages such as Python and Bash. * Experience onboarding and troubleshooting telemetry from cloud, endpoint, network, identity, SaaS, Windows, Linux, and custom application sources. * Strong understanding of enterprise security architecture, networking, incident response, access control, secure system design, and cybersecurity best practices. Preferred Skills/Experience of the SIEM Engineer (Palo Alto Cortex XSIAM/XDR): * CISSP, Security+, GIAC, or similar cybersecurity certification. * Palo Alto Cortex, Cribl, or other SIEM/security platform certifications. * Experience administering Cortex XSIAM and Cortex XDR in large-scale, multi-tenant environments. * Experience supporting Tier 1-Tier 3 SOC analysts, threat hunting, and incident response activities. * Experience developing operational documentation, playbooks, runbooks, and technical procedures. ## Description SYSTEMTEC is seeking a SIEM Engineer for a remote opportunity for candidates working EST hours. The Candidate will serve as a SIEM Security Engineer supporting the design, implementation, optimization, and administration of enterprise security monitoring and XDR platforms within a complex, multi-tenant environment. The role partners with security engineers, architects, and SOC analysts to strengthen threat detection, automate response processes, and ensure the reliability and performance of critical cybersecurity technologies supporting 24x7 operations., * Design, implement, administer, and optimize Palo Alto Cortex XSIAM and Cortex XDR platforms to enhance enterprise threat detection and response capabilities. * Develop and maintain detection content, analytics, dashboards, threat hunting queries, automation, and response playbooks to improve security operations. * Engineer and support Cribl log pipelines, including data modeling, normalization, enrichment, routing, and telemetry ingestion from diverse technology platforms. * Integrate security platforms with enterprise tools such as ticketing, identity management, threat intelligence, and notification systems while ensuring platform performance and reliability. * Support Security Operations Center teams through troubleshooting, detection tuning, threat hunting, documentation, and knowledge transfer activities. * Monitor platform health, optimize system performance, and collaborate with technical stakeholders to continuously improve enterprise security monitoring capabilities. ## Related Videos - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Technical Documentation - How Can I Write Them Better and Why Should I Care?](https://www.wearedevelopers.com/videos/681-technical-documentation-how-can-i-write-them-better-and-why-should-i-care) - [Tips and Tricks for Working with JSON](https://www.wearedevelopers.com/videos/1229-tips-and-tricks-for-working-with-json) - [Better Together: Leveraging Your Observability Tools as a SIEM](https://www.wearedevelopers.com/videos/2118-better-together-leveraging-your-observability-tools-as-a-siem) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)