Platform SIEM Engineer II

Deepwatch

Platform SIEM Engineer II providing expert production support for Deepwatch's managed cybersecurity services. Involved in solution optimization, troubleshooting, and customer data operational management.

Posted 5/27/2026full-timeTampa • Florida • 🇺🇸 United StatesJuniorMid-Level💰 $130,000 - $150,000 per yearWebsite

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

SIEM administrationlog data pipelinestroubleshooting methodologiesscripting in Pythonscripting in Bashscripting in PowerShellLinux systems administrationWindows systems administrationcloud platformssecurity operations

Soft Skills

communicationdocumentationoperational disciplineindependent troubleshootingmanaging competing prioritiesclear communication with technical audiencesclear communication with non-technical audiences

Tools & Technologies

SplunkMicrosoft SentinelGoogle SecOpsSecuronixCrowdStrike NG SIEMPalo Alto XSIAMAWSAzureGCPSIEM platforms

Certifications & Qualifications

relevant security certificationscloud certifications

Industry Keywords

information securitysecurity monitoringlog collection solutionsnetwork architecturesdata pipelinesincident managementproduction impacting issuessecurity techniquessecurity trendsfast-paced environment

Tech Stack

Tools & technologies

AWSAzureCloudGoogle Cloud PlatformLinuxPythonSplunk

About the role

Key responsibilities & impact

Provide first line support of production impacting issues before engaging additional resources
Monitor, manage, and optimize SIEM platform performance, which includes but are not limited to:
Splunk
Google SecOps
Microsoft Sentinel
Securonix
CrowdStrike NG SIEM
Palo Alto XSIAM
Maintain, manage, and troubleshoot log collection solutions running on Linux and Windows systems supporting data pipelines into SIEM platforms.
Identify and remediate critical log ingest gaps to support continuous security monitoring
Communicate with leadership and support roles (internal and external)
Manage ticket request/incident statuses and provide timely follow up to internal and external customers
Participate in projects/initiatives as needed
Document network architectures and topologies
Keep up-to-date with information security news, techniques, and trends

Requirements

What you’ll need

Have 2+ years of experience in SIEM administration, security operations, or a related field.
Have hands-on experience with at least one SIEM platform such as Splunk, Microsoft Sentinel, Google SecOps, Securonix, CrowdStrike NG SIEM, or Palo Alto XSIAM
Understand log data pipelines, parsing, normalization, and troubleshooting methodologies.
Are comfortable administering and troubleshooting Linux and Windows systems
Have experience working with cloud platforms such as AWS, Azure, or GCP
Can independently troubleshoot operational issues and manage competing priorities
Communicate clearly with both technical and non-technical audiences
Maintain strong documentation and operational discipline in a fast-paced environment
Have scripting experience in Python, Bash, or PowerShell
Have experience with AWS, Azure, or GCP
Hold relevant security or cloud certifications

Benefits

Comp & perks

Medical, dental, vision, and disability insurance
Flexible Time Off (FTO), 12 company holidays, sick leave and 8-Weeks Paid Parental Leave
Unique professional development benefits with Annual “development dollars” to support our people growth and development
Wellness contests and monthly educational programs
401(K) retirement program