Senior SIEM Engineer - USA Remote

Danaher Corporation

3d•$155,000 - $175,000•Remote

About The Position

The Senior SIEM Engineer will be responsible for engineering, sustaining, and continuously improving Danaher's cybersecurity monitoring platforms that enable enterprise-wide threat detection, investigations, and security operations. This position is within the Danaher Corporate Information Security team, reporting to the Senior Manager, Cyber Threat Engineering as a fully remote role. In this role, you will have the opportunity to drive Data Collection Operational Excellence by monitoring the operational health of log data pipelines, SIEM platforms, infrastructure and data feeds to ensure data is available, parsed and normalized to support cybersecurity threat detection and investigation. You will also design for Scale & Supportability by researching, evaluating, and implementing data pipeline and SIEM solution upgrades and enhancements that expand cybersecurity visibility enterprise-wide, and sustaining supporting components to ensure a secure and performant environment allowing capabilities available to be leveraged to full potential. Additionally, you will collaborate for Success by partnering with engineering, infrastructure and security operations peers across Danaher and all operating companies.

Requirements

5+ years of experience deploying, administering, maintaining, and optimizing enterprise log data pipelines and SIEM solutions in complex enterprise environments.
Hands-on experience administering leading SIEM and security operations platforms, including CrowdStrike Next-Gen SIEM, Splunk, Microsoft Sentinel, Palo Alto XSIAM, Google SecOps (Chronicle), Humio, Elastic, and similar technologies.
Proven expertise implementing, integrating, and leveraging enterprise log data pipeline solutions such as Cribl, Databahn, Bindplane, Vector, or comparable platforms to support security monitoring and analytics.
Demonstrated experience developing solutions and integrations across cloud environments, including Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP), while translating business requirements into scalable technical solutions.
Strong documentation and communication skills, with experience creating and maintaining operating procedures, logical flow diagrams, formal reports, and other technical documentation to support operational excellence and knowledge transfer.

Nice To Haves

Demonstrated programming or scripting language expertise including but not limited to Python, Bash, PowerShell (Python preferred)
Demonstrated experience automating deployments using scripts or Infrastructure as Code (IaC) methodologies
Demonstrated proficiency leveraging regular expressions for parsing and pattern matching
Experience administering applications deployed on Linux\UNIX operating systems

Responsibilities

Monitor the operational health of log data pipelines, SIEM platforms, infrastructure and data feeds to ensure data is available, parsed and normalized to support cybersecurity threat detection and investigation.
Research, evaluate, and implement data pipeline and SIEM solution upgrades and enhancements that expand cybersecurity visibility enterprise-wide.
Sustain supporting components to ensure a secure and performant environment allowing capabilities available to be leveraged to full potential.
Partner with engineering, infrastructure and security operations peers across Danaher and all operating companies.