Security Engineer

JD responsibility

What it means in practical terms

SIEM architecture and administration

Configure, maintain and troubleshoot the SIEM platform.

Log source onboarding

Connect Windows, Linux, firewalls, VPNs, cloud systems, databases and applications to the platform.

Parsing and normalization

Convert different log formats into consistent, searchable fields.

Falcon Onum pipelines

Build data flows that filter, enrich, transform and route logs.

CQL detection rules

Write queries and alerts to identify suspicious security activity.

MITRE ATT&CK mapping

Map detection rules to known attacker tactics and techniques.

Dashboards and monitoring

Track log ingestion, pipeline failures, platform health and detection coverage.

Ingestion and cost optimization

Reduce unnecessary data ingestion and manage storage and licensing consumption.

Automation and integrations

Connect alerts to incident-management tools and automate response workflows.

Troubleshooting and escalation

Resolve complex failures across log sources, collectors, pipelines, networks and SIEM.

Documentation and mentoring

Prepare SOPs, document integrations and guide junior engineers.