Security Telemetry / SIEM Engineer - 100% Remote - 3 Years Contract

Job Details:

Job Title:             Security Telemetry / SIEM Engineer

Location:             100% Remote

Duration:            3 Years Contract

Description:

Routes Zscaler, Island, and third-party session telemetry through Cribl into Devo and builds detection content for anomalous third-party access.

Responsibilities

* Build and maintain Cribl → Devo security telemetry pipelines.

* Integrate Zscaler, Island, and third-party security/session data.

* Normalize, enrich, filter, and troubleshoot security logs.

* Develop Devo SIEM detection rules, alerts, and dashboards.

* Detect anomalous third-party access, suspicious sessions, and unusual authentication activity.

* Support SOC investigations and improve telemetry coverage.

Required Skills

* Hands-on Cribl and Devo SIEM experience.

* Experience with Zscaler and/or Island telemetry.

* Strong SIEM, log management, and detection engineering knowledge.

* Understanding of IAM, SSO, MFA, OAuth/SAML, and third-party access.

* Experience with APIs, JSON, Syslog, and security data pipelines.

* Scripting experience with Python or PowerShell preferred.