The posting
This position is listed on behalf of a partner company, which manages all applications and next steps. Our partner is looking for a Cyber Engineer Architect – SIEM Security Architect based in the United States.
The Cyber Engineer Architect – SIEM Security Architect will lead the design, deployment, and integration of advanced cybersecurity solutions that strengthen security visibility, threat detection, and incident response across complex IT environments. This role focuses on Security Information and Event Management (SIEM), security orchestration, network traffic visibility, and secure infrastructure architecture. You will leverage technologies such as Splunk, Palo Alto Networks, CrowdStrike, Gigamon, ExtraHop, and Tenable to improve system protection, scalability, and operational resilience. Working closely with cross-functional engineering and security teams, you will ensure that security controls align with established compliance frameworks and enterprise logging standards. You will also provide advanced troubleshooting, architectural guidance, and technical mentorship to support continuous improvement. This fully remote opportunity is ideal for an experienced cybersecurity professional who enjoys solving complex infrastructure challenges and contributing to mission-critical security operations.
Accountabilities:
- Cybersecurity Architecture and Deployment: Design, architect, deploy, and maintain advanced cybersecurity solutions, including SIEM platforms, intrusion detection and prevention systems (IDS/IPS), web content filtering, network forensics, and firewall management.
- Splunk Platform Engineering: Architect and implement distributed Splunk environments, optimizing log ingestion, data processing, security monitoring, scalability, and operational performance.
- Security Automation and Orchestration: Lead the integration of Splunk SOAR with SIEM platforms, Palo Alto security solutions, endpoint detection and response tools such as CrowdStrike, and ticketing systems such as ServiceNow.
- Network Visibility and Traffic Analysis: Integrate Gigamon and ExtraHop visibility solutions to support deep packet inspection, network flow mapping, enhanced threat investigation, and security toolchain optimization.
- Security Information Management: Develop and enhance enterprise log management capabilities, ensuring effective collection, correlation, analysis, and monitoring of security events across distributed infrastructure.
- Security Controls and Compliance: Collaborate with cross-functional teams to design, implement, and enforce security controls aligned with NIST, FedRAMP, and applicable enterprise log management standards.
- Infrastructure Troubleshooting: Diagnose and resolve complex cybersecurity and infrastructure issues, provide escalation support, and help restore system functionality while minimizing operational disruption.
- Secure Access and Infrastructure Integration: Support secure remote access, cloud migration, load balancing, and network visibility initiatives to strengthen the security and availability of enterprise systems.
- Technical Communication: Explain security architectures, technical designs, and operational capabilities to customers and support teams, improving understanding of managed security services and security best practices.
- Technical Leadership and Mentorship: Work independently with limited supervision while coaching junior engineers, sharing technical knowledge, and encouraging collaboration across the team.
- Continuous Improvement: Identify opportunities to improve security monitoring, automation, incident response, system availability, and the effectiveness of cybersecurity infrastructure.
- Education: Bachelor's degree in Computer Engineering, Systems Engineering, or a related technical field.
- Professional Experience: At least 10 years of relevant experience supporting complex IT cybersecurity infrastructure, with a strong focus on risk mitigation, security architecture, and compliance.
- Splunk Architecture: At least five years of experience deploying and architecting distributed Splunk implementations.
- Splunk Expertise: Strong hands-on proficiency with Splunk Cloud, Splunk Enterprise Security (ES), Splunk SOAR, and Splunk User Behavior Analytics (UBA).
- Cybersecurity Technologies: Demonstrated experience designing and implementing SIEM solutions, IDS/IPS, web content filtering, network forensics, firewall management, and related security infrastructure.
- Security Integration: Experience integrating SIEM and SOAR platforms with endpoint detection and response solutions, network security tools, and IT service management or ticketing systems.
- Network Visibility: Knowledge of network traffic monitoring, deep packet inspection, flow mapping, and visibility platforms such as Gigamon and ExtraHop.
- Infrastructure and Cloud Security: Experience with secure remote access, cloud migration, load balancing, and distributed enterprise environments.
- Security Standards and Compliance: Familiarity with NIST and FedRAMP security frameworks, risk mitigation practices, and enterprise logging and monitoring requirements.
- Troubleshooting and Problem-Solving: Strong analytical skills and the ability to investigate complex infrastructure issues, resolve technical incidents, and provide escalation support.
- Communication and Leadership: Excellent technical communication skills, with the ability to explain complex architectural concepts to customers and technical stakeholders while mentoring junior colleagues.
- Professional Certification: Splunk Certified Architect certification is required.
- Preferred Certifications: Splunk Core Consultant, Splunk Advanced Power User, Splunk Cloud Admin, Palo Alto Networks Certified Network Security Engineer (PCNSE), or equivalent certifications.
- Work Arrangement: Ability to work remotely within the United States and collaborate effectively with distributed technical teams.
- Security Screening: No active security clearance is required. The selected candidate will be subject to a security investigation.
- Annual Salary: $170,144–$201,250, depending on experience, geographic location, and applicable contractual requirements. Actual compensation may fall outside this range.
- Employment Type: Full-time position, with a standard schedule of 40 hours per week.
- Remote Work: Fully remote opportunity available across the United States.
- Flexible Work Schedule: Full-flex workweek options designed to support autonomy, productivity, and work-life balance.
- Healthcare Coverage: Multiple medical plan options, including plans with Health Savings Accounts (HSAs), as well as dental and vision insurance.
- Retirement Benefits: 401(k) retirement plan with employer matching contributions and pre-tax and post-tax contribution options.
- Paid Time Off: Typically 15 days of paid leave per calendar year for eligible new employees, prorated based on the hire date.
- Paid Holidays: Typically 10 paid holidays annually, subject to applicable eligibility and proration.
- Additional Leave: Access to eligible sick, personal, military, bereavement, jury duty, and parental leave benefits.
- Paid Family Leave: Eligible employees may receive up to 160 hours of paid family leave within a rolling 12-month period.
- Income Protection: Short-term and long-term disability benefits, life insurance, accidental death and dismemberment coverage, and other insurance options.
- Professional Development: Paid education, certification opportunities, and resources to expand technical expertise.
- Career Growth: Access to internal mobility opportunities and support for long-term professional advancement.
- Advanced Technology Exposure: Opportunities to work with modern cybersecurity, cloud, network visibility, and security automation technologies.
- Travel: Less than 10% travel expected.
How Jobgether works:
We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.
We appreciate your interest and wish you the best!
Why Apply Through Jobgether?
Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.
#LI-CL1
