SIEM Engineer II

About the role

At Kirkland & Ellis, we don’t just meet the standard for legal excellence — we set it. Our culture is built on teamwork, ingenuity and an unwavering commitment to continuous growth. We tackle the most sophisticated legal challenges with bold ideas and innovative solutions, powered by the exceptional experience and ambition of our 7,000+ people, including 4,000+ attorneys, across 24 offices worldwide. Our dedicated professionals share our lawyers’ commitment to excellence and show up each day to do meaningful work that helps drive global business, investment and innovation forward.

What You’ll Do

• Assist in the implementation, administration, and ongoing optimization of the Firm’s SIEM platform (e.g., Google Security Operations (SecOps), Splunk, Exabeam, Microsoft Sentinel).
• Support the design and maintenance of Cribl pipelines, including data routing, filtering, enrichment, and performance optimization.
• Build and maintain integrations for standard and custom log sources using APIs, agents, syslog, and cloud-native logging services.
• Partner with Cybersecurity Operations to develop and refine SIEM use cases, correlation rules, and alerting logic.
• Create and enhance dashboards, searches, and reports to support SOC (Security Operations Center) operations and threat hunting.
• Contribute to documentation of SIEM architecture, data flows, onboarding processes, and operational procedures.
• Help establish and monitor data quality standards to ensure reliable and accurate telemetry.
• Work with IT, Cloud, and Application teams to onboard new systems and ensure proper logging coverage.
• Provide support during security incidents, assisting with investigation and analysis efforts.
• Stay current on SIEM technologies, security analytics, and observability trends to enhance capabilities.

What You’ll Bring

• Education: Bachelor’s degree or equivalent professional experience required.
• Experience: Minimum of 3–5 years in IT or engineering, with at least 2–3 years focused on SIEM, logging, or security analytics.
• SIEM Fundamentals: Hands-on experience working with SIEM platforms such as Google SecOps (Chronicle), Splunk, Exabeam, or Microsoft Sentinel.
• Cribl Exposure: Experience working with Cribl, including pipeline configuration and log onboarding, preferred.
• Data Integration Skills: Familiarity with integrating log sources using APIs, syslog, or agents.
• Analytics & Visualization: Experience building dashboards, alerts, and queries to support security monitoring and operations.
• Security Knowledge: Understanding of common log sources, including endpoint, network, identity, cloud, SaaS (Software as a Service), and application logs.
• Collaboration & Communication: Ability to work effectively with cross-functional teams and communicate technical concepts clearly.
• Technical Foundation: Exposure to scripting or query languages (e.g., SPL, KQL, Python, Regex) and cloud platforms (Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform (GCP)) is a plus.
• Problem Solving & Growth Mindset: Strong analytical skills, attention to detail, and a proactive approach to learning and improvement.

Compensation

The base salary range below represents the low and high end of the salary range for this position in Chicago. This range may differ based on your geographic location and cost of living considerations. At Kirkland & Ellis, we consider compensation more than just a base salary. We offer an exceptional range of flexible benefits including comprehensive healthcare, paid time off, and retirement. We also offer personal support and tailored learning and development opportunities all designed to help you realize your full potential both in life and at work.

Compensation Range

• Chicago: $133,000 - $166,000

How to Apply

Thank you for your interest in Kirkland & Ellis LLP. To complete an application and submit your resume, please click "Apply Now." Don't meet every job requirement? That's okay! If you're excited about this role but your experience doesn't perfectly fit every qualification, we encourage you to apply anyway. You may be just the right person for this role or others at Kirkland.