Remote Position
Security Telemetry / SIEM Engineer - 100% Remote - 3 Years Contract
🌍 Remote · United States
💼 Full-time
Job Details: Job Title: Security Telemetry / SIEM Engineer Location: 100% Remote Duration: 3 Years Contract Description: Routes Zscaler, Island, and third-party session telemetry through Cribl into Devo and builds detection content for anomalous third-party access.
Responsibilities
- Build and maintain Cribl → Devo security telemetry pipelines.
- Integrate Zscaler, Island, and third-party security/session data.
- Normalize, enrich, filter, and troubleshoot security logs.
- Develop Devo SIEM detection rules, alerts, and dashboards.
- Detect anomalous third-party access, suspicious sessions, and unusual authentication activity.
- Support SOC investigations and improve telemetry coverage.
Required Skills
- Hands-on Cribl and Devo SIEM experience.
- Experience with Zscaler and/or Island telemetry.
- Strong SIEM, log management, and detection engineering knowledge.
- Understanding of IAM, SSO, MFA, OAuth/SAML, and third-party access.
- Experience with APIs, JSON, Syslog, and security data pipelines.
- Scripting experience with Python or PowerShell preferred.