JSOC - Principal SIEM Engineer
QuestradeSão Paulo, São Paulo, Brazil
Posted April 6, 2026
Full Time
About the Company
Questrade Financial Group is a Canadian fintech company that offers low-cost brokerage services, including stocks, options, forex, and gold, as well as tax-free and registered savings accounts. Leveraging advanced technology, it provides an online platform for investing, wealth management, and mortgage products, positioning itself as a digital alternative to traditional banks. The firm differentiates itself through a focus on affordability, customer empowerment, and a culture that encourages innovation and career growth. Questrade’s collaborative, diverse work environment and commitment to shaping the future of fintech make it an attractive destination for professionals seeking to build a rewarding career.
Job Description
Questrade Financial Group (QFG) is seeking a Principal SIEM Engineer to design, deploy, and maintain security tools, Elastic cluster architecture, and Kafka streaming infrastructure. The ideal candidate will have 5+ years of experience in SIEM platform engineering, Elastic Stack administration, and data pipeline architecture in an enterprise environment.
Requirements
- 5+ years of relevant experience in SIEM platform engineering
- Experience with deployment and management of security solutions (EDR, SOAR, WAF, email gateway and more)
- Extensive experience designing, deploying, and maintaining production Elasticsearch/OpenSearch clusters at scale.
- Deep expertise with Elastic Security, Kibana, Logstash, Beats, and Elastic Agent for security monitoring and log management.
- Proven experience designing and operating Apache Kafka infrastructure (brokers, ZooKeeper/KRaft, Connect) for high-throughput log streaming.
- Experience with NXLog deployment, configuration, and management for enterprise log collection.
- Strong Linux systems administration skills and experience managing infrastructure in production environments.
- Proficiency in scripting languages (Python, Bash) for automation, tooling development, and infrastructure-as-code.
- Deep understanding of index lifecycle management, data retention strategies, and storage optimization for large-scale SIEM deployments.
- Experience with CI/CD pipelines (GitLab) for detection-as-code and infrastructure automation.
- Demonstrated experience mentoring and developing engineering skills across a platform or infrastructure team.
- Strong ability to communicate platform architecture decisions and capacity planning to technical and non-technical stakeholders.
Benefits
- Health & wellbeing resources and programs
- Paid vacation, personal, and sick days for work-life balance
- Competitive compensation and benefits packages
- Career growth and development opportunities
- Opportunities to contribute to community causes
- Work with diverse team members in an inclusive and collaborative environment