Information Security Engineer: II (Intermediate)
Marketing & Communications, IT · Contractor
Remote
Information Security Engineer II (SIEM & Security Monitoring)
Location: Remote
Type: Contract
Interview: Virtual
About the Role
We're looking for an Information Security Engineer to help modernize our enterprise security monitoring platform and support the migration from legacy logging infrastructure to CrowdStrike Falcon Next-Gen SIEM. You'll play a key role in centralized logging, security monitoring, log source onboarding, data quality validation, and SIEM engineering operations.
In this role, you'll work closely with Cyber Defense, Infrastructure, Network Engineering, and Security Operations teams to ensure security telemetry is collected, normalized, monitored, and optimized to support threat detection and compliance requirements.
The ideal candidate has hands-on experience with SIEM technologies, log ingestion pipelines, security monitoring, and enterprise-scale observability platforms. Experience with CrowdStrike Falcon Next-Gen SIEM, Splunk, CRIBL, and log migration initiatives is highly desirable.
What You'll Do
- Support enterprise SIEM operations and centralized security monitoring capabilities.
- Assist with migration of log sources from Splunk Cloud, CRIBL, Syslog-NG, and related technologies into CrowdStrike Falcon Next-Gen SIEM.
- Onboard, configure, and validate new log sources while ensuring complete and accurate log collection.
- Monitor security telemetry pipelines and investigate ingestion failures, parsing issues, and log outages.
- Validate log volume, event quality, field extraction, enrichment, and Common Information Model (CIM) compliance.
- Collaborate with infrastructure teams to support bandwidth, proxy, and networking requirements for large-scale log migrations.
- Implement and support data bifurcation strategies between legacy and next-generation SIEM platforms.
- Ensure critical enterprise applications, databases, authentication systems, and infrastructure sources are properly integrated into centralized logging solutions.
- Analyze log data to identify gaps in visibility and improve monitoring coverage.
- Partner with Security Operations Center (SOC) teams to improve detection capabilities and monitoring effectiveness.
- Document onboarding procedures, validation processes, and operational runbooks.
- Participate in incident response investigations and security monitoring initiatives.
Minimum Qualifications
- 3+ years of experience in Cybersecurity, Security Engineering, SIEM Administration, or Security Operations.
- Hands-on experience with:
- CrowdStrike Falcon Next-Gen SIEM
- Splunk Enterprise Security (ES)
- Splunk Cloud
- CRIBL
- Syslog-NG
- Experience onboarding and managing log sources across enterprise environments.
- Working knowledge of:
- Windows
- Linux
- Active Directory
- DNS
- VPN
- Firewalls
- Proxy solutions
- Experience troubleshooting logging, monitoring, and data ingestion issues.
- Familiarity with Jira, Confluence, and ServiceNow.
- Experience supporting centralized logging and monitoring platforms.
- Strong analytical and problem-solving skills.
Preferred Qualifications
- Experience with CrowdStrike Falcon LogScale or Falcon Next-Gen SIEM implementations.
- Experience migrating from Splunk to CrowdStrike environments.
- Knowledge of SIEM data normalization, parsing rules, enrichment, and CIM mapping.
- Familiarity with security frameworks including:
- NIST Cybersecurity Framework
- NIST 800-53
- FFIEC CAT
- Experience supporting regulated industries such as banking, financial services, healthcare, or government.
- Exposure to SOX, GLBA, audit logging, and compliance monitoring requirements.
- Understanding of Detection Engineering, Threat Hunting, and Security Analytics.
- Experience working in large enterprise or SOC environments.
Medical, dental, and vision insurance are available to qualified candidates who meet eligibility requirements.