Apply on Employer Site

griddable.io · 6 hours ago

Software Engineering LMTS

San Francisco, CA

Full-time

Onsite

Lead/Staff

Griddable.io is looking for a highly skilled Lead Member of Technical Staff to join their Information Security team. This role involves serving as the technical owner of the Security Information and Event Management platform and transforming the organization's ability to detect and respond to security incidents effectively.

AnalyticsBig DataCloud Data ServicesData IntegrationInformation TechnologySaaSSoftware

Responsibilities

Serve as the primary technical point of contact for the SIEM platform

Manage vendor relationships, including coordinating new feature enablement, tracking bugs, and holding the vendor accountable for system stability and availability

Enforce a rigorous 'safe change' process to achieve 'zero manual changes' by routing all administrative actions through auditable, internal processes

Act as the 'ultimate gatekeeper for the quality of data' within the SIEM

Define and enforce strict SIEM ingestion requirements, including format and enrichment processes, to ensure high-quality, structured, and contextualized log data

Manage direct integrations from SaaS applications and other log sources, such as SQS and S3, to eliminate intermediate data hops and improve fidelity

Oversee the availability and performance of the vendor SAAS platform, with a target uptime of 99.9%

Build and maintain supporting services to monitor and alert on key metrics, including end-to-end log ingestion pipeline health, data freshness (targeting a maximum 5-minute latency), data ingestion rate, and deviation from ingestion time

Develop and implement services to automate platform changes and streamline processes, moving away from fragmented, manual tasks and over-reliance on 'tribal knowledge'

Manage the full lifecycle of new feature enablement, from proof of concept and validation to controlled rollout

Participate in on-call duties for platform-related incidents, ensuring timely remediation and documenting corrective actions

Lead the team in making key architectural decisions and participate in design reviews to ensure that technical solutions are not only robust but also scalable for future growth

Conduct code reviews to enforce best practices and ensure the delivery of high-quality, production-ready features

Define and optimize workflows and processes to improve efficiency and reduce waste across our security operations

Establish a framework of standards and procedures and mentor the team to continuously identify opportunities for improvement

Qualification

SIEM solutionsData pipelinesCrowdStrikeSplunkGoogle ChronicleLog ingestionObservability servicesUser access managementRBACSCIM-based access controlProblem-solvingCommunicationCollaboration

Required

Proven experience in a senior technical role (e.g., LMTS) managing and operating security platforms in a large-scale enterprise environment

Deep expertise with SIEM solutions, including direct, hands-on experience with CrowdStrike, Splunk, or Google Chronicle

Strong understanding of data pipelines, including log ingestion from various sources (APIs, SQS, S3, SaaS platforms)

Experience with building observability services and monitoring key platform health metrics

Demonstrated ability to drive change and automate processes, reducing manual effort and improving operational efficiency

Experience with user access management and RBAC, particularly with SCIM-based access control

Excellent problem-solving, communication, and collaboration skills. The ability to work effectively with cross-functional teams and external vendors is essential

Company

griddable.io

Griddable.io is a San Jose, CA based SaaS startup that closed Series A funding in 2017 from August Capital, Artiman Ventures, and Carsten Thoma, founding CEO of Hybris (acquired by SAP).

Founded in 2016