Siem Security Engineer

Merck & Co., Inc.

Not specified; not specified; competitive salary +...
Hybrid
Microsoft sentinel platform administration
Kusto query language (kql) proficiency
Cribl log routing and pipeline management
Merck & Co., Inc. is seeking a SIEM Security Engineer to enhance their Microsoft Sentinel platform within their global Security Operations team. The ideal candidate will have strong experience in log ingestion, data engineering, and detection engineering, specifically using Azure Data Explorer and Cribl

Job Summary

  • This role is responsible for taking ownership of the Microsoft Sentinel platform to enable scalable security monitoring and high-fidelity detections across a complex enterprise environment.
  • The engineer will design and maintain log ingestion pipelines using Cribl to ensure data quality, cost optimization, and efficient processing before ingestion into Sentinel or ADX.
  • Candidates must possess strong hands-on experience with KQL for creating analytics rules, scheduled queries, and advanced hunting queries while collaborating with global SOC teams.

Matching Summary

Match Score: 85

Merck & Co., Inc. is seeking a SIEM Security Engineer to enhance their Microsoft Sentinel platform within their global Security Operations team. The ideal candidate will have strong experience in log ingestion, data engineering, and detection engineering, specifically using Azure Data Explorer and Cribl.

Salary

Not specified; Not specified; Competitive salary and benefits package

Skills & Requirements

Must-have

  • Microsoft Sentinel platform administration
  • Kusto Query Language (KQL) proficiency
  • Cribl log routing and pipeline management
  • Azure Data Explorer (ADX) experience
  • SOC incident response support
  • Enterprise cloud security telemetry

Nice-to-have

  • Sentinel SOAR Logic Apps automation
  • MITRE ATT&CK aligned hunting
  • Python or PowerShell scripting skills
  • Zero-trust architecture exposure
  • Regulated industry experience
  • Relevant security certifications

Key Requirements

  • Strong hands-on experience with Microsoft Sentinel
  • Advanced proficiency in Kusto Query Language (KQL)
  • Practical experience with Cribl for log management
  • Experience working with Azure Data Explorer (ADX)
  • Solid understanding of security logging and telemetry
  • Excellent troubleshooting skills in distributed environments

Work Rights

Not specified

Tailored Resume

Cover Letter