Skip to main content

We'd prefer it if you saw us at our best.

Pega.com is not optimized for Internet Explorer. For the optimal experience, please use:

Close Deprecation Notice

Senior Cloud SIEM Engineer

Job Category: Engineering & Cloud
Location: US - Virginia - Dulles

Meet Our Team:

Pega is The Enterprise Transformation Company that helps organizations Build for Change with enterprise AI decisioning and workflow automation. We offer a commercial SaaS version of our industry-leading platform to our global clients. Pega was recently recognized as one of the “Top 10 Tech Winners For The AI Revolution” by industry analysts and just hit a huge milestone of joining the S&P MidCap 400. On the frontlines of this success is the Pega Cloud Security Operations Center (CSOC). Our team of information security professionals is charged to protect Pega’s commercial cloud assets and offerings. We accomplish this by creatively working to deter, detect, deny, delay, and defend against internal and external security threats. The CSOC provides monitoring, detection, and incident response services for Pega Cloud.

Picture Yourself at Pega:

As a Senior Cloud SIEM Engineer, you will play a pivotal role in designing, implementing, and optimizing the security monitoring infrastructure that protects Pega’s global cloud environments. You will be instrumental in advancing our detection and response capabilities by engineering scalable, cloud-native solutions that enable real-time visibility into security events across AWS, GCP, and hybrid environments.


You will accomplish this by leveraging your deep expertise in SIEM technologies—particularly Google Chronicle/SecOps—to build and maintain robust pipelines for log ingestion, normalization, and correlation. Collaborating closely with security analysts, detection engineers, cloud architects, and various engineering teams, you will help shape the architecture and operational maturity of our cloud security telemetry. Your work will directly support proactive threat detection, automated response, and continuous improvement of our security posture. As a Senior Cloud SIEM Engineer at Pega, your contributions will be critical to ensuring the integrity and resilience of our cloud infrastructure. You’ll be part of a high-performing team that values innovation, precision, and collaboration. Your efforts will help safeguard the trust our clients place in us as we deliver transformative digital experiences at scale.


So, picture yourself at Pega, where your engineering expertise is valued, and your passion for building secure, intelligent systems is celebrated. Join us in redefining cloud security operations and make a lasting impact on the future of enterprise security.

What You'll Do at Pega:

•    Help design and implement Pega’s cloud-native SIEM solution (Google Chronicle/SecOps)
•    Manage and maintain the Chronicle/SecOps SIEM platform, ensuring its effective operation and integration with other security and automation tools
•    Develop dashboards, reports, and other non-alert based content to maintain and improve situational awareness of Pega Cloud’s security posture
•    Assist in the development of SOAR playbooks for use by analysts to enrich, investigate, and respond to security alerts and detections
•    Assist the threat detection team in developing and maintaining security monitoring and alerting rules based on use cases for known and emerging threats and hypotheses derived from the Pega threat landscape
•    Collaborate with cross-functional teams to assist data ingestion/parsing efforts & ensure best security practices are followed
•    Contribute to standard operating procedure (SOP) and policy development for CSOC detection and analysis tools and methodologies
•    Participate regular security assessments and audits to identify and mitigate risks
•    Provide technical guidance and mentorship to junior team members

Who You Are:

You have an insatiable curiosity and a relentless drive to engineer smarter, faster, and more scalable ways to detect, investigate, and respond to threats in the cloud. You've architected and fine-tuned detection pipelines, enriched telemetry sources, and built resilient integrations that empower security teams to act with speed and precision. You bring deep expertise in cloud-native platforms—especially AWS, GCP, and Chronicle/SecOps—and are ready to apply that knowledge to elevate Pega Cloud’s detection and response capabilities.


You have a proven track record in the security engineering space. Your accomplishments include:
•    Earning top-tier technical certifications such as AWS Certified Solutions Architect, Google Cloud Professional Security Engineer, or Splunk Certified Architect.
•    Recognition for designing and deploying innovative SIEM solutions that close visibility gaps and enhance detection coverage across complex cloud environments.

What You've Accomplished:


•    5+ years of experience in SIEM engineering and administration
•    1-2 years of current, operational experience with Google Chronicle/SecOps, including implementation, management, and optimization
•    3+ years of operational experience working with YARA-L, Grok, and YAML languages
•    Experience with Splunk Enterprise Security (ES), including writing SPL and building correlation searches, lookup files, and other knowledge objects
•    Operational experience working with SOAR technologies and creating automation integrations and playbooks
•    Strong experience with cloud architecture, infrastructure, and resources (AWS & GCP), along with the associated services, threats, and mitigations – including knowledge and analysis of various cloud logs such as CloudTrail, Cloud Audit, GuardDuty, Security Command Center, CloudWatch, Cloud Ops, Trusted Advisor, Recommender, VPCFlow, and WAF logs
•    Operational experience with EDR/XDR platforms, related logs, and integrations
•    Solid working knowledge of MITRE ATT&CK framework, the associated TTP's and how to map detections against them, particularly the cloud matrix portion
•    A solid foundational understanding of computer, OS (Linux/Windows), and network architecture concepts, and various related exploits/attacks
•    Proficiency in scripting languages such as Python, PowerShell, or Bash
•    Strong understanding of security best practices and frameworks (e.g., NIST, ISO 27001).
•    Experience developing standard operating procedures (SOPs), runbooks/playbooks for repeated actions, and security operations policies – with an aim to maximize our tools’ potential with automation whenever possible
•    Familiarity with threat intelligence platforms and frameworks
•    Strong analytical skills and ability to interpret complex data sets
•    A demonstrated ability to work in a team environment and foster a healthy, productive team culture:
•    Proactive communicator with both verbal and written communication
•    Process oriented with the ability to extract key action items from situations and convert them into repeatable processes for others to emulate
•    Vision on long-term mechanisms as opposed to heroic efforts and/or tribal knowledge

Pega Offers You:

    A robust global benefits program including a competitive pay + bonus incentive, unlimited PTO, and Employee Equity in the company
    An innovative, inclusive, agile, flexible, and fun work environment full of opportunities to learn and grow
    At Pega, we believe in continuous learning and growth. You will have access to cutting-edge technologies and training resources, allowing you to stay at the forefront of cloud security.
    Pega's culture fosters collaboration, innovation, and work-life balance. You’ll participate in team-building activities and engage in open discussions during daily/weekly team meetings
    You will have the flexibility to work remotely when needed, allowing you to maintain a healthy work-life integration
    Gartner Analyst acclaimed technology leadership across our categories of products and services  #LI-KH2

Job ID: 22185

Apply Now

Already have an account? Log in.

Invitation to Self-Identify

Pegasystems Inc. is subject to certain nondiscrimination and affirmative action record keeping and reporting requirements which require Pegasystems Inc. to invite employees and applicants to voluntarily self-identify their gender identity, race/ethnicity, disability status, and veteran status. Submission of this information is voluntary and refusal to provide it will not subject you to any adverse treatment. The information obtained will be kept confidential and may only be used in accordance with the provisions of applicable federal laws, executive orders, and regulations, including those which require the information to be summarized and reported to the Federal Government of civil rights enforcement purposes.

Race and Ethnicity

Please select the ethnicity or race you most closely identify with:

Hispanic or Latino - A person of Cuban, Mexican, Puerto Rican, South or Central American, or other Spanish culture or origin regardless of race.

White (Not Hispanic or Latino) - A person having origins in any of the original peoples of Europe, the Middle East or North Africa.

Black or African American (Not Hispanic or Latino) - A person having origins in any of the black racial groups of Africa.

Native Hawaiian or Other Pacific Islander (Not Hispanic or Latino) - A person having origins in any of the peoples of Hawaii, Guam, Samoa or other Pacific Islands.

Asian (Not Hispanic or Latino) - A person having origins in any of the original peoples of the Far East, Southeast Asia or the Indian Subcontinent, including, for example, Cambodia, China, India, Japan, Korea, Malaysia, Pakistan, the Philippine Islands, Thailand and Vietnam.

American Indian or Alaska Native (Not Hispanic or Latino) - A person having origins in any of the original peoples of North and South America (including Central America) and who maintains tribal affiliation or community attachment.

Two or More Races (Not Hispanic or Latino) - All persons who identify with more than one of the above five races.

I do not wish to disclose - If you choose not to disclose your race/ethnicity, your employer is still required to include such information about you in the EEO-1 Report by using existing employment records or other permitted means to do so.

Disability Status

Form CC-305, OMB Control Number 1250-0005, Expires 4/30/2026

Why are you being asked to complete this form?

We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal. To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years. Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential. No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way. If you want to learn more about the law or this form, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at https://www.dol.gov/ofccp.

How do you know if you have a disability?

A disability is a condition that substantially limits one or more of your “major life activities.” If you have or have ever had such a condition, you are a person with a disability. Disabilities include, but are not limited to:

  • Alcohol or other substance use disorder (not currently using drugs illegally)
  • Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDS
  • Blind or low vision
  • Cancer (past or present)
  • Cardiovascular or heart disease
  • Celiac disease
  • Cerebral palsy
  • Deaf or serious difficulty hearing
  • Diabetes
  • Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders
  • Epilepsy or other seizure disorder
  • Gastrointestinal disorders, for example, Crohn's
  • Disease, irritable bowel syndrome
  • Intellectual or developmental disability
  • Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD
  • Missing limbs or partially missing limbs
  • Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supports
  • Nervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS)
  • Neurodivergence, for example, attention-deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities
  • Partial or complete paralysis (any cause)
  • Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema
  • Short stature (dwarfism)
  • Traumatic brain injury

PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.

Veteran Status

Why Are You Being Asked to Complete This Form?

This employer is a Government contractor subject to the Vietnam Era Veterans' Readjustment Assistance Act of 1974, as amended by the Jobs for Veterans Act of 2002, 38 U.S.C. 4212 (VEVRAA). VEVRAA requires Government contractors to take affirmative action to employ and advance in employment protected veterans. To help us measure the effectiveness of our outreach and recruitment efforts of veterans, we are asking you to tell us if you are a veteran covered by VEVRAA. Completing this form is completely voluntary, but we hope you fill it out. Any answer you give will be kept private and will not be used against you in any way.

For more information about this form or the equal employment obligations of Federal contractors, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp.

How Do You Know if You Are a Veteran Protected by VEVRAA?

Contrary to the name, VEVRAA does not just cover Vietnam Era veterans. It covers several categories of veterans from World War II, the Korean conflict, the Vietnam era, and the Persian Gulf War which is defined as occurring from August 2, 1990 to the present.If you believe you belong to any of the categories of protected veterans please indicate by checking the appropriate box below. The categories are defined on the next page and explained further in an “Am I a Protected Veteran?” infographic provided by OFCCP.

What Categories of Veterans Are “Protected” by VEVRAA?

“Protected” veterans include the following categories: (1) disabled veterans; (2) recently separated veterans; (3) active duty wartime or campaign badge veterans; and (4) Armed Forces service medal veterans. These categories are defined below.

  1. A “disabled veteran” is one of the following:
    1. a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or
    2. a person who was discharged or released from active duty because of a service-connected disability.
  2. A “recently separated veteran” means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.
  3. An “active duty wartime or campaign badge veteran” means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.
  4. An “Armed forces service medal veteran” means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.
  • 8 characters minimum
  • 1 number
  • 1 special character (!@#%$*+.)
  • 1 lowercase character
  • 1 uppercase character
By providing a password, you will become a Pega Digital Community Member and be able to track your application status

Required, allowed file types are DOC, DOCX, PDF, TXT (2MB max)

By clicking "Submit Application" I agree that I have read and agree to Pegasystems Privacy and Security Policy, Terms of Use, and Candidate Privacy Notice. If at any time I would like to opt-out of receiving text messages, I can text "stop" after receiving a text message from Pegasystems.

AI in Action – Pega embraces the power of artificial intelligence. We encourage all employees to actively engage with AI technologies and continually explore ways to responsibly integrate AI into our products and processes.

Culture – At Pegasystems, we foster an environment where people feel valued and empowered to contribute their best. With global clients across industries and regions, we know our success depends on the unique perspectives, experiences, and talents of our people. Ours is a workplace where everyone can grow, collaborate, and deliver meaningful outcomes.

We encourage candidates from all backgrounds and experiences and focus on the core competencies and mindset needed to thrive in a role.

As an Equal Opportunity employer, Pegasystems will not discriminate in its employment practices due to an applicant's race, color, religion, sex, sexual orientation, gender identity, national origin, age, genetic information, veteran or disability status, or any other category protected by law.

Export Compliance – For positions requiring access to technical data subject to export control regulations such as this, Pegasystems may need to obtain export license approval from the U.S. Government and EU Authorities for certain individuals.

Accommodations – If you require reasonable accommodations under the Americans with Disabilities Act (US only) or comparable regional regulations in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, please contact us here or contact (US only) 1-888-PEGA-NOW and/or 225 Wyman Street Waltham, MA 02451 ATTN: Benefits.

Labor Condition Applications
GDPR Candidate Privacy Notice
Pegasystems Limited UK Gender Pay Gap Statement
EEO/AA Policy Statement
Know Your Rights: Workplace Discrimination is Illegal
Pay Transparency Policy Statement
Your Employee Rights Under the Family and Medical Leave Act
E-Verify Notice
Employee Polygraph Protection Act Rights

Share this page Share via X Share via LinkedIn Copying...