13 hours ago
Sunnyvale, CA, USAMid Level
Base Salary
$123k - $151k/yr
Responsibilities
- Analyze raw security and audit logs from Fortinet and third-party products.
- Build and maintain FortiSIEM log parsers that extract and normalize data into standard event attributes.
- Create and update FortiSIEM security rules, reports, dashboards, and related detection content.
- Research vendor documentation, advisories, and sample logs to support integrations and detections.
- Develop and maintain lightweight integrations and supporting tools using Python, regular expressions, APIs, and scripting.
- Test and troubleshoot parsers, rules, and integrations using representative log samples and expected results.
- Use Linux and Git/GitLab for development, source control, code review, and collaboration.
- Collaborate with developers, QA, support, and security researchers to validate and release FortiSIEM content.
Requirements
- Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, or a related technical field, or equivalent practical experience.
- At least 3 years of software engineering experience with a bachelor's degree, or at least 2 years with a master's degree.
- Strong Python programming skills, including data structures, file and network I/O, error handling, testing, and debugging.
- Strong regular-expression skills and understanding of parsing correctness and performance for untrusted or irregular log data.
- Understanding of algorithms, data structures, complexity, object-oriented design, and concurrent or asynchronous execution where applicable.
- Working knowledge of Linux processes, files, permissions, networking basics, command-line troubleshooting, and shell scripting.
- Working knowledge of Git/GitLab and collaborative code-review workflows.
- Ability to interpret unfamiliar logs, APIs, schemas, and vendor documentation and convert them into deterministic software and detection logic.
- Strong debugging, problem-solving, communication, and reproducible-testing skills.
- Security telemetry or experience with SIEM, security analytics, log management, EDR, firewalls, identity, or cloud systems is strongly preferred.
- Familiarity with detection engineering concepts, MITRE ATT&CK, SIEM parsers, correlation rules, Sigma-style detections, or security-content packages is preferred.
- C++, REST APIs, JSON, XML, syslog, TLS, sockets, authentication mechanisms, distributed or high-throughput event-processing systems, public cloud platforms, developer tooling, automated test harnesses, or CI/CD checks are preferred.
Benefits
- Medical, dental, vision, life, and disability insurance.
- 401(k), 11 paid holidays, vacation time, sick time, and a comprehensive leave program.
- Eligibility to participate in the Fortinet equity program and potential bonus eligibility.
- Full-time position requiring authorization to work in the U.S. without sponsorship.
About Fortinet
Fortinet is a public cybersecurity company that builds network security hardware and software for enterprises, service providers, and governments. Its FortiGate firewalls, secure networking (SD-WAN), endpoint and cloud security, and threat intelligence subscriptions are sold via direct and channel partners. Founded in 2000 and headquartered in Sunnyvale, California, Fortinet trades on NASDAQ (FTNT) and serves more than 660,000 customers worldwide.