SIEM Engineer – Security Monitoring

About the role

As a SIEM Engineer you will be responsible for developing and implementing Amgen’s security monitoring strategy, protecting data, systems and networks from threats. You will design and deploy robust monitoring architecture, work closely with IT teams and ensure real‑time detection across the technology stack.

Key responsibilities

• Configure and maintain SIEM and Security Data Lake components, including log collection, ingestion, parsing and normalization.
• Monitor health and performance of SIEM/SDL, troubleshoot issues and document findings.
• Implement and test log source integrations and configuration changes according to technical requirements.
• Validate log data quality and develop detection rules, dashboards and reports.
• Support incident investigations by providing relevant SIEM data and coordinating with source owners.
• Maintain documentation, support audits and recommend improvements to procedures and configurations.

Required profile

• Master’s degree with 1‑2 years experience, or Bachelor’s degree with 2‑3 years experience in Information Systems or related field.
• Proven track‑record in security monitoring and detection engineering practices.

Required skills

• Log collection tools: Splunk Universal Forwarder, Fluentd, Cribl.
• SIEM platforms: QRadar, Elastic, ArcSight, Microsoft Sentinel.
• Security Data Lake solutions: Snowflake, AWS‑based platforms.
• Network security, endpoint protection and incident response.
• Scripting/automation: Python, Bash.
• Cloud‑hosted infrastructure deployment and monitoring.
• AI agent development and integration with APIs.

What we offer

• Work that matters – build technology that accelerates scientific breakthroughs.
• Modern cloud‑first, automation‑focused tech stack.
• Global scale with agile, high‑impact teams.
• Continuous learning – certifications, trainings and mentorship.
• Comprehensive total rewards package covering health, finance and well‑being.
• Hybrid work model – split between Lisbon office and remote.