SIEM Architect

Bring more to life.

At Danaher, our work saves lives. And each of us plays a part. Fueled by our culture of continuous improvement, we turn ideas into impact – innovating at the speed of life.

Our 63,000+ associates work across the globe at more than 15 unique businesses within life sciences, diagnostics, and biotechnology.

Are you ready to accelerate your potential and make a real difference? At Danaher, you can build an incredible career at a leading science and technology company, where we’re committed to hiring and developing from within. You’ll thrive in a culture of belonging where you and your unique viewpoint matter.

Learn about the Danaher Business System which makes everything possible.

The SIEM Architect is a new position that will play a pivotal role in design, implementation, and evolution of Danaher’s enterprise-wide SIEM and supporting architecture.

This position is within the Danaher Corporate Information Security team, reporting to the Sr. Manager, Cyber Threat Engineering. This is a Danaher Corporate role, hosted by our Cytiva operating company in Krakow.

In this role, you will have the opportunity to:

• Deliver Operational Priorities – Act as the technical Subject Matter Expert (SME) for enterprise cybersecurity log data management solutions, pursuing opportunities for optimization and standardization enterprise-wide.

• Drive Operational Excellence and Supportability – Define and implement scalable, modular, secure, and maintainable solutions.

• Design Enterprise Architecture – Design and build architecture artifacts describing system High-Level Design (HLD) and Low-Level Design (LLD) and maintain existing artifacts.

• Collaborate for Success – Partner with engineering and architecture peers across Danaher and all operating companies.

The essential requirements of the job include:

• 7+ years of deploying, managing, maintaining, or architecting enterprise SIEM solutions.

• Demonstrated experience administering a range of SIEM platforms and supporting infrastructure including but not limited to Splunk, Microsoft Sentinel, Palo Alto XSIAM, Google SecOps (Chronicle), Humio, Elastic.

• Experience implementing and leveraging log data pipeline and technologies including but not limited to Cribl, Vector, or Tenzir.

• Demonstrated experience with cloud service providers including but not limited to Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform (GCP).

• Experience translating business requirements into solution requirements.

• Experience preparing and maintaining documentation, including but not limited to architectural diagrams, logical flow diagrams, operating procedures, and use case documentation.

Preferred skills and experience:

• Demonstrated programming or scripting language expertise including but not limited to Python, Bash, PowerShell (Python preferred).

• Demonstrated experience communicating across levels within an organization from Engineering and Operations team members to Senior Leadership.