We are looking for a SIEM Engineer to join our cybersecurity engineering team working on IPv6 adoption within the organization.
The ideal candidate has hands-on experience with Palo Alto XSIAM technology, deep understanding of SIEM systems, and practical knowledge of IPv6 protocol implementation.
The role involves developing and maintaining data parsers, correlation rules, and dashboards, as well as collaborating with internal teams to ensure a smooth IPv6 integration into existing security monitoring content.
Details:
Location: Full Remote (EU-based only)
Language: English (B2/C1)
Contract Type: Full-time Consultant
Responsibilities:
- Develop and maintain IPv6 raw data parsers, correlation rules, and dashboards.
- Implement IPv6 support into SIEM content while following predefined processes and change control policies.
- Collaborate with internal security, infrastructure, and network teams to ensure seamless integration of IPv6 into existing monitoring systems.
- Update reporting formats to properly highlight newly identified IPv6 systems.
- Design and maintain tools capable of:
- Collecting information from F5 BigIP Load Balancers via API.
- Sending and receiving data to/from Qualys Cloud through Secure Web Gateway.
- Interacting with NMAP applications hosted in IaaS.
- Storing collected data in MySQL databases.
- Contribute to the development of infrastructure supporting full IPv6 readiness for security monitoring.
Requirements:
- 2–3 years of experience working with SIEM systems (preferably Palo Alto XSOAR/XDR/XSIAM).
- Strong understanding of IPv6 protocol and network communication principles.
- Solid grasp of common cybersecurity attack methods and defensive mechanisms.
- Proficiency in Python, including packaging and dependency management (Poetry).
- Experience working in Docker environments.
- Familiarity with MySQL and REST API integrations.
- Good English communication and documentation skills.
- Strong decision-making and problem-solving abilities.
Nice to have:
- Experience with large-scale IPv6 adoption projects.
- Exposure to security automation and orchestration.
- Familiarity with F5 BigIP, Qualys, or NMAP integration