← Back to jobs

Openkyber Logo
Senior SIEM Architect with cloud-native AI/ML

Openkyber

 

Round Rock, TX, USA

Posted On: 13 days ago
Experience: 15+ years
Availability: Remote
Openings: 1
Category: SIEM Engineer
Tenure: No Preference/Any
Related Jobs

No related jobs found

Description

Architect and build a cloud-native AI/ML observability platform, owning the production-grade SIEM collector pipeline that ingests, normalizes, and analyzes multi-cloud telemetry.

This role is remote.

Responsibilities

  • Architect and implement multi-tenant SIEM collector pipelines (receivers, processors, exporters) across AWS, Azure, and GCP.
  • Build multi-source ingestion from CloudTrail, Azure Monitor, GCP Audit Logs, Splunk, Sentinel, and API logs.
  • Normalize telemetry to OpenTelemetry semantic conventions and implement DLQ and replay pipelines.
  • Design detection engines using rules and ML anomaly detection, plus behavioral analytics for entity and data flow modeling.
  • Enable real-time alerting, severity classification, and immutable audit logging for governance.

Required Skills

  • 15+ years of experience in software engineering and architecture.
  • Expertise in SIEM platforms (Splunk, Sentinel, Elastic, Chronicle) and multi-tenant distributed SaaS applications.
  • Strong background in Java microservices development.
  • Hands-on experience with OpenTelemetry (OTel Collector, OTTL).
  • Deep streaming and data pipeline expertise using Kafka, Kinesis, Event Hub, PubSub, Flink, or Kafka Streams.
  • Experience with Kubernetes and Infrastructure as Code.
  • Knowledge of data warehousing and analytics technologies.

Preferred Skills

  • Working knowledge of ML-based anomaly detection and behavioral analytics.

Education

Any Graduate

Related Jobs

No related jobs found

← Back to jobs