> Markdown version of [/jobs/ext/3949132-cybersecurity-engineer-managed-siem](https://www.wearedevelopers.com/jobs/ext/3949132-cybersecurity-engineer-managed-siem). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cybersecurity Engineer, Managed SIEM - **Company:** Critical Start - **Location:** Atlanta, GA, United States (Remote available) - **Experience:** Experienced - **Salary:** $80,000.0 - $110,000.0 - **Contract:** Permanent contract - **Skills:** Application Programming Interfaces (APIs), Artificial Intelligence, Amazon Web Services, Microsoft Azure, Bash Shell, Cloud Computing, Cyber Security, Computer Programming, DevOps, Internet Security, Python (Programming Language), Windows PowerShell, Ansible, Security Information and Event Management, Scripting, Data Ingestion, Information Technology, Microsoft Sentinel, Puppet, Terraform, Splunk - **Published:** October 27, 2026 - **Apply:** https://www.careerbuilder.com/job-details/cybersecurity-engineer-managed-siem-atlanta-ga--94b18653-46f3-432c-9235-3afeab572aee ## About the Role Security Information and Event Management (SIEM), Internet Security, Team Player, Internet Security, Leading Edge Technology, Computer Security, Service Level Agreement (SLA), Risk Management, Artificial Intelligence (AI), Risk Analysis, * Bachelor''s degree in Computer Science, Cybersecurity, Information Technology, or equivalent experience and industry certifications. * 2+ years of experience in a cybersecurity engineering role * 2+ years of experience with SIEM tools, specifically Splunk & Microsoft Sentinel. * Proficiency in handling security data sources, log formats, and data ingestion methods. * Experience creating SIEM content such as alerts, reports, and dashboards. * Strong communication and customer service skills. * 2+ years of experience with next-gen antivirus (AV) or endpoint detection and response (EDR) solutions. * Scripting capabilities in languages like Bash, PowerShell, Python, or others. * Ability to establish trust and rapport with customers, even when dealing with complex technical issues. Desired Qualifications: * 2+ years of experience with Cloud Technologies (Azure, AWS, or GCP). * Experience deploying security solutions in an MSSP environment is a plus. * Experience with DevOps tools is a plus (Terraform, Ansible, Puppet, Salt Stack, etc.). * Scripting abilities in Bash, PowerShell, Python, or other programming/scripting languages., * Stationary position for extended periods of time. * Constantly operate a computer. * Occasionally you may be required to move equipment or other items up to 20 lbs. * The ability to communicate information and ideas so others will understand. Must be able to exchange accurate information in these situations. Mental: * Must be able to apply established protocols in a timely manner. * Make timely decisions in the context of workflow. * Ability to complete tasks and perform in situations requiring speed deadlines, or productivity quota. * Ability to work effectively and efficiently in high stress situations. * Ability to simultaneously address multiple complex problems. For positions that can or will be performed, in whole or in part, remotely within the U.S., range and benefits information for this position are being included in accordance with requirements of various state/local pay transparency legislation. Please note that salaries may vary for different individuals in the same role based on several factors, including but not limited to location of the role, individual competencies, education/professional certifications, experience, performance in the role and potential for revenue generation (sales roles only). ## Description We are searching for a dedicated and proficient Cybersecurity Engineer to join our Managed Security Services team. Your responsibilities will include monitoring and maintaining multiple SIEM environments within the scope of Critical Start''s Managed Services offerings. You will collaborate with both team members and clients to onboard and support various security technologies such as Microsoft Sentinel and Splunk, while also creating customized solutions to enhance our services. The perfect candidate should have extensive knowledge of Security Information and Event Management (SIEM) tools, including Microsoft Sentinel and Splunk. What You Will Be Doing? Your daily tasks involve configuring data sources and log forwarders, creating custom content (dashboards, workbooks, reports, alerts), conducting thorough environment reviews and gap analyses, and fulfilling advanced SIEM requests. * Maintain Expertise: Stay at the forefront of the industry by continuously updating your knowledge in SIEM tools. * Client Engagement: Deliver our managed services to clients through project-based workflows related to SIEM technologies. * Technical Guidance: Provide technical leadership, expertise, and configuration assistance to both colleagues and clients, helping them maintain robust and effective SIEM security programs. * Technical Development: Collaborate on developing technical pathways to foster growth within the organization and lead cross-functional training sessions. * Best Practices: Create and maintain best practices and assist clients in deploying and configuring security policies, log forwarders, data sources, content, and alerts. * Security Maturation: Assist clients in maturing their SIEM security products in alignment with industry standards and our program offerings. * Problem Resolution: Troubleshoot interactions between data sources and SIEM technologies, as well as API interactions between supported security integrations and our platform (CORR). * Automation: Identify opportunities to automate aspects of SIEM engineering workload, enhancing efficiency and accuracy. * Client Collaboration: Work closely with clients to address technical concerns, provide value reporting, and configure their environments effectively. * Documentation: Develop and maintain comprehensive security documentation, including playbooks, standard operating procedures, and training materials as needed. * Continuous Learning: Stay up-to-date with the latest security threats and trends, incorporating this knowledge into our security solutions. Obtain and maintain relevant security certifications. * Team Collaboration: Collaborate with fellow cybersecurity engineers, product managers, and architects to design and implement innovative security solutions, ensuring the highest level of protection for our clients.