Security Operations Platform Enablement Engineer

Candidates should have a minimum of 2+ years of recent experience in SIEM Engineering or a similar engineering discipline, with experience working in complex enterprises and global organizations, preferably in insurance or financial services. A deep understanding of standard security controls and frameworks, task management technologies like Jira, ServiceNow, and Confluence is desirable, along with strong IT technical skills and experience coordinating technical teams. Proven ability to design and implement ingestion and transformation pipelines across modern data platforms, experience with SOAR solutions, and familiarity with CrowdStrike NGSIEM data connectors, pipelines, and parsers are preferred. An understanding of cybersecurity operations processes, procedures, guidelines, and solutions, including practical experience of cyber kill chain principles, strong knowledge of Windows, UNIX, and Linux operating systems, cloud infrastructure, networking, malware defenses, and perimeter controls are essential. Experience with log aggregation platforms for data normalization and routing, such as Cribl or Apache Kafka, is desirable, and a Bachelor's degree or equivalent practical experience is preferred.