Professional Services - Field Engineer (SIEM & TIP)

At Securonix, we’re on a mission to secure the world by staying ahead of cyber threats, reinforcing all layers of our platform with AI capabilities. Our Securonix Unified Defense SIEM provides organizations with the first and only AI-Reinforced solution built with a cybersecurity mesh architecture on a highly scalable data cloud. Enhanced by Securonix EON’s AI capabilities, our innovative cloud-native solution delivers a seamless CyberOps experience, empowering organizations to scale their security operations and keep up with evolving threats.

Recognized as a five-time leader in the Gartner Magic Quadrant for SIEM and highly rated on Gartner Peer Insights, our award-winning Unified Defense SIEM provides organizations with 365 days of ‘hot’ data for rapid search and investigation, threat content-as-a-service, proactive defense through continuous peer and partner collaboration, and a fully integrated Threat Detection, Investigation, and Response (TDIR) experience—all within a single platform. Built on a cloud-native architecture, the platform leverages the Snowflake Data Cloud for unparalleled scalability and performance.

Securonix is proud to be a cybersecurity unicorn and featured in CRN's 2024 Security 100 list. Backed by Vista Equity Partners, one of the largest private equity firms with over $100 billion in assets under management, we have a unique advantage in driving innovation and growth. With a global footprint, we serve more than 1,000 customers
worldwide, including 10% of the Fortune 100. Our network of 150+ partners and Managed Security Service Providers (MSSPs) enables us to deliver unmatched security solutions on a global scale.

ThreatQ, by ThreatQuotient, is a leading Threat Intelligence Platform (TIP) designed to help security teams manage, analyze, and act on cyber threat data, unifying internal and external sources to accelerate threat detection, investigation, and response (TDIR). It centralizes intelligence, automates workflows, enhances collaboration, and integrates with existing security tools (SIEM, SOAR, EDR) for a data-driven defense, reducing noise and enabling faster, smarter decisions against evolving threats.

At Securonix, we are driven by our core values and place our people at the heart of everything we do:

• Winning as One Team: We work together with universal respect to achieve aligned outcomes

• Customer Driven Innovation: We innovate to stay ahead of the market and create value for our customers

• Agility in Action: We embrace change and are unified in our purpose and objectives amidst change

Join us as we redefine cybersecurity, innovate fearlessly, and grow together as one team.

Job Title: Professional Services – Field Support Engineer [SIEM & TIP]

Job Level: Individual Contributor

Total Experience: 3-5 years

Relevant Experience: 2 years

Primary Skill Sets: Linux Admin & Scripting, SQL / MySQL / DynamoDB, Python/Java

Secondary Skill Sets: MISP, Service Management, DevOps Tools

POSITION SUMMARY:

This role is an extension of the Professional Services and Customer Support teams and acts as a bridge between the customer’s environment and Securonix Backoffice teams primarily responsible for identifying,

troubleshooting, diagnosing, and implementing related fixes in the Securonix On-Premises software issues. In addition, this role is also expected to track, record and follow up on identified technical challenges, perform software maintenance and configuration and develop scripts and / or processes to improve operational efficiency.

POSITION RESPONSIBILITIES:

• Provide on-shore support of Securonix software applications and related infrastructure.
• Develop a deep understanding of the Securonix Snypr and ThreatQ software applications.
• Coordinate with Securonix TAM’s and Customer Support teams to execute any work delegated
• Configure and deploy any Securonix-related component in the on-premises environment.
• Participate in a 24x7 shift rotation while at home base, as well as on-call rotation to support site or system outages.
• Persistent follow-ups with Securonix TAMs, engineering, and Customer support teams to ensure timely delivery of fixes.
• Coordinate with customers for identified and troubleshooting issues raised.
• Research, diagnose and resolve complex technical issues or identify workarounds for any issues raised. Troubleshoot technical issues to establish the root cause of problems and form a solution or workaround.
• Identify opportunities for improvements in systems and processes.
• Draft RCA documents and participate in post-implementation reviews and problem management processes.
• Prioritize and manage assigned support tickets while adhering to department service level agreements.
• Manage customers’ expectations and experience in a way that results in high customer satisfaction.
• Develop and maintain technical expertise in assigned areas of product functionality and utilize that expertise effectively to help customers.
• Set up lab environments and reproduce customer issues, file bug tickets, escalate cases to engineering, and provide necessary documentation.
• Contribute to SOPs / KBs articles.
• Consistently meet or exceed SLA obligations.

REQUIRED SKILLS:

• Expert with Linux and Windows administration, maintenance & deployment
• Experience with databases and writing SQL queries
• Experience in scripting and development languages like Go, JavaScript, PHP, Python, Perl, Ruby.
• Understanding of regular expressions (Regex)
• Proficiency in data profiling, cleansing, parsing, standardization, and data quality exception handling and monitoring.
• Demonstrated experience in analyzing and interpreting complex data to provide resolution for data-related issues.
• Highly developed, process-oriented skills for troubleshooting and problem resolution.
• Experience in IT Service Management fundamentals – including Incident, Problem, & Change Management.
• Experience with container and container management technologies (Docker, Packer, Kubernetes, Firecracker)
• Knowledge of infrastructure and automation tools such as Ansible, Salt Stack, and Terraform.
• Cyber Investigations and Operations experience.
• Experience installing cybersecurity systems like Splunk, Arcsight, MISP etc
• Experience working with technologies such as firewall, VPN, intrusion detection tools, Malware tools, authentication tools, endpoint technologies, and cloud security tools
• Understanding of IT security, risk, compliance, and privacy concepts and principles to support enterprise business goals and objectives.
• Bachelor’s degree in Computer Science, engineering, software engineering, or related field.
• 2+ years of experience in application technical support, development, and operations.

REQUIRED SOFT SKILLS:

• Good interpersonal skills and communication with all levels of management.
• Experience engaging directly with B2B customers. Ability to fine-tune your message for both technical and business audiences.
• Utilize a strong sense of urgency in resolving issues.
• Maintain a positive attitude and advocate for the customer through product issue resolution.
• Strong written communication skills.
• Able to multitask, prioritize, and manage time efficiently.

Securonix is an equal opportunity employer committed to fostering an innovative, inclusive, diverse and discrimination-free work environment. Employment with Securonix is based on merit, competence, and qualifications. It is our policy to administer all personnel actions, including recruiting, hiring, training, and promoting employees, without regard to race, color, religion, gender, sexual orientation, gender identity, national origin or ancestry, age, disability, marital status, veteran status, or any other legally protected classification in accordance with applicable federal and state laws. Consistent with the obligations of these laws, Securonix will make reasonable accommodations for qualified individuals with disabilities.