> Markdown version of [/jobs/ext/2035265-siem-migration-implementation-lead](https://www.wearedevelopers.com/jobs/ext/2035265-siem-migration-implementation-lead). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # SIEM Migration & Implementation Lead - **Company:** The Aes Group, Inc - **Location:** San Jose, CA, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Application Programming Interfaces (APIs), Cyber Security, Database Queries, Domain Name System (DNS), Intrusion Detection and Prevention, Python (Programming Language), Parsing, Windows PowerShell, Security Information and Event Management, Systems Integration, Mitre Att&ck, Firewalls (Computer Science), Cybercrime - **Published:** August 12, 2026 - **Apply:** https://www.dice.com/job-detail/b0bbb981-f10e-4cfb-9aca-177f990378d3 ## About the Role * 10+ years of SIEM Engineering, Security Monitoring, Detection Engineering, or Security Operations experience. * Proven experience leading enterprise SIEM migrations or greenfield deployments. * Strong hands-on experience with one or more SIEM platforms. * Strong expertise in SIEM query writing, dashboard development, correlation rule creation, and detection engineering. * Experience integrating and onboarding diverse enterprise security telemetry sources. * Strong scripting and automation experience (Python, PowerShell, APIs). * Strong understanding of MITRE ATT&CK and threat detection methodologies. Success Criteria: Successful migration of log sources, detections, dashboards, and reporting. ## Description * Lead SIEM implementation and migration activities. * Design log collection, parsing, normalisation, and correlation architecture. * Migrate log sources, detections, dashboards, reports, and integrations. * Develop detection content, correlation rules, dashboards, and security analytics. * Write complex SIEM queries for investigations, detections, reporting, and threat hunting. * Onboard endpoint, firewall, DNS, identity, cloud, DLP, proxy, email, and application logs. * Support testing, cutover, go-live, and operational transition activities. ## Related Videos - [Better Together: Leveraging Your Observability Tools as a SIEM](https://www.wearedevelopers.com/videos/2118-better-together-leveraging-your-observability-tools-as-a-siem) - [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime) - [Tips and Tricks for Working with JSON](https://www.wearedevelopers.com/videos/1229-tips-and-tricks-for-working-with-json) - [Deep Fakes: The Lies We Can’t See](https://www.wearedevelopers.com/videos/1187-deep-fakes-the-lies-we-can-t-see) - [Building a Compiler with C#](https://www.wearedevelopers.com/videos/116-building-a-compiler-with-c) - [Why make use of an integration platform in today's software developments and infrastructure?](https://www.wearedevelopers.com/videos/758-why-make-use-of-an-integration-platform-in-today-s-software-developments-and-infrastructure) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Navigating the AI Shift](https://www.wearedevelopers.com/magazine/629-navigating-the-ai-shift) - [How to Become an AI Engineer](https://www.wearedevelopers.com/magazine/331-how-to-become-an-ai-engineer) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)