Data Ingestion Engineer - SIEM (US Remote) at Anomali #vacancy #remote

Company Description Anomali, a world-renowned platform leader in Security Operations, supercharges SecOps by fusing Lightspeed Security Analytics, Industry-Leading Cyberthreat Intelligence (CTI), AI-based automated threat hunting, alert orchestration, automated threat detection and incident response (TDIR) blocking, community intelligence sharing, exposure management, and dark web protection. Transforming CISOs into superheroes and analysts into SOC terminators. Anomali’s Platform offers: “Match” Next-Gen SIEM, “Lens” AI Threat Hunter, “ThreatStream” TIP, Anomali Integrator, Anomali ISAC, Anomali Attack Surface Management, and Anomali Digital Risk Protection, infused with Anomali AI. Anomali bridges the gap between point solutions (EDR, NDR, SSE, RMM, CAASM, etc.) and replaces legacy SIEMs at 50% the cost, giving analysts easy-to-use tools that enable lightspeed detection & response. Anomali addresses the global shortage in cyber talent by empowering analysts to contain, eradicate, and block threats in seconds without complex SIEM queries, manual blocks, or long investigations. Anomali delivers as a proprietary platform and disruptor to the security analytics world. Anomali can search billions of logs in seconds, correlating tens of millions of IoCs and IoAs across years of telemetry and logs often deleted or moved to cold storage. At every point across the cyber kill chain, Anomali supercharges the SOC to detect, contain, and eradicate threats before organizational impact. Responsibilities: Qualifications: Required Skills/Experience: o Bachelor’s degree in Computer Science or equivalent experience o Extensive background and expertise in data ingestion for multiple SIEM technologies o A minimum of two years of experience as a field systems engineer, sales engineer or consultant supporting large enterprise customers o Strong grasp of general networking concepts and proficiency in Linux o Deep understanding of security and information event management (SIEM) principles and methodologies o Hands-on experience and proficiency with data ingestion for SIEM platforms such as ArcSight, SPLUNK, NetWitness, QRadar, McAfee SIEM, or similar tools. o Proficiency in scripting languages such as Python or Perl o Openness to coaching and a proactive approach to training/feedback o Self-motivated, displaying a robust work ethic o Clear and concise communicator with strong interpersonal skills o Demonstrated ability to manage data ingestion timelines and quality Equal Opportunities Monitoring It is our policy to ensure that all eligible persons have equal opportunity for employment and advancement on the basis of their ability, qualifications and aptitude. We select those suitable for appointment solely on the basis of merit without regard to an individual’s disability, race, religion, sex, age or sexual orientation. Monitoring is carried out to ensure that our equal opportunity policy is effectively implemented. If you are interested in applying for employment with Anomali and need special assistance or accommodation to apply for a posted position, contact our Recruiting team at .

Perl SIEM Python Linux Networking

Залишити відповідь