Elastic Search SIEM Engineer

• Jobseeker Video Testimonials 
  
• Employee Glassdoor Reviews
  

We are an IT Solutions Integrator/Consulting Firm helping our clients hire the right professional for an exciting long term project. Here are a few details.

Requirements

Key Responsibilities:

• Onboard and configure log sources into Elastic Search SIEM.
  

• Develop, tune, and optimize detection rules for security monitoring.
  

• Support integration activities with security and IT infrastructure systems.
  

• Collaborate with SOC and security engineering teams to enhance monitoring use cases.
  

• Provide expertise in Elastic Search query development and troubleshooting.
  

• Maintain documentation for onboarding, detection, and integration processes.
  

Required Skills & Experience:

• 3–6 years of experience in security monitoring, SIEM, or Elastic Search-based platforms.
  

• Hands-on expertise with Elastic Search SIEM (log onboarding, rule tuning, dashboards).
  

• Strong knowledge of log formats, parsing, and correlation logic.
  

• Experience with detection engineering and incident response processes.
  

• Good understanding of networking, operating systems, and security concepts.
  

• Familiarity with Elastic Search Data Lake concepts (preferred).
  

Good to Have:

• Certifications in Elastic Search, SIEM, or Cybersecurity (e.g., Elastic Certified Engineer, Splunk, or SOC-related certifications).
  

• Exposure to scripting (Python, Bash, PowerShell) for automation.
  

Benefits

Visit us at http://alignity.io/careers. Alignity Solutions is an Equal Opportunity Employer, M/F/V/D.