SIEM onboarding Engineer

Role & responsibilities

We are seeking a technically proficient SIEM Onboarding Engineer to support the integration of customer environments into our Inopli SIEM platform. The ideal candidate will have strong experience in Linux system administration (preferably LPIC-2 certified), Python scripting, and a solid understanding of network and infrastructure components to facilitate secure data ingestion via syslog or HTTPS.

Key Responsibilities:

• Lead and support onboarding of customer data sources into the Inopli SIEM platform.
• Develop and maintain Python scripts for custom parsing and correlation using the Inopli correlator.
• Configure and troubleshoot Linux-based syslog servers and log forwarders.
• Assist customers in enabling secure communication (syslog or HTTPS) from their infrastructure to the Inopli SaaS environment.
• Collaborate with internal teams and customers to ensure successful log ingestion and parsing.
• Document onboarding procedures, integration guides, and troubleshooting steps.
• Monitor onboarding progress and provide timely updates to stakeholders.
• Ensure compliance with security and privacy standards during data onboarding.

Required Skills & Qualifications:

• 45 years of experience in Linux system administration (preferably LPIC-2 certified).
• Strong scripting skills in Python, especially for log parsing and automation.
• Experience with syslog protocols (Syslog, Syslog-ng, Rsyslog) and log forwarding tools (e.g., Filebeat, Logstash).
• Good understanding of network protocols, firewalls, and secure communication (HTTPS, TLS).
• Familiarity with SIEM platforms and log correlation concepts.
• Ability to troubleshoot connectivity and data parsing issues across diverse environments.
• Strong communication and customer-facing skills.

Preferred Qualifications:

• Experience with Inopli SIEM or similar SaaS-based SIEM platforms.
• Knowledge of cloud environments (AWS, Azure, GCP) and their logging mechanisms.
• Exposure to onboarding logs from security tools (firewalls, EDR, antivirus, etc.).
• Familiarity with REST APIs and JSON data formats.