RoleWeek

Remote SIEM jobs

28 remote roles open to the US or Canada, posted Oct 21–27, 2026, list SIEM as a skill, from 26 employers. That is 3% of the 1,032 remote roles open to the US or Canada that RoleWeek lists.

A role counts when SIEM is among the up to five technologies RoleWeek read in its posting. Data as of .

28roles list SIEM
26employers posted them
1posted in the last 24 hours
$133K–$178Kmedian posted yearly range, 20 roles

Who is hiring

EmployerRoles
Horizon3.ai2
Peraton2
1Password1
Allstate1
Apollo.io1
Axios1
Centene1
ClassLink1
Cribl1
Crum & Forster1

The 10 employers with the most roles, out of 26. One role is one opening, however many places it is listed for.

By level

LevelRolesShare
Intern14%
Entry level14%
Mid level518%
Senior932%
Staff+621%
Manager27%
Director+414%

Level is RoleWeek’s reading of each posting.

What these roles post as salary

20 of these 28 roles list a yearly salary range in US dollars. The median bottom of those ranges is $133K and the median top is $178K; the middle half of the bottoms runs from $114K to $192K, and of the tops from $131K to $236K. These are the ranges employers posted in their own postings: not offers, not what people are paid and not a market average. Posted ranges across all the remote developer roles open to the US or Canada that RoleWeek lists: Developer salary ranges for remote roles · Security engineer salary ranges.

Not counted: 7 roles list no salary and 1 lists pay by the hour. Pay by the hour, week or month is never converted or mixed with yearly ranges, and each page uses one currency.

Roles that list SIEM

Showing 24 of 28, newest first. Search the roles in this list that mention SIEM

How these counts are made

  • Source: the roles RoleWeek lists as posted in the last 7 days, straight from employers’ own hiring systems. A role counts for a skill when that skill is one of the up to five technologies RoleWeek read in the posting’s title and description (the title first, then the most mentioned). A role that names a skill once among many tools may not list it, so these count the roles that list the skill, not all the roles that touch it.
  • Names are matched exactly: Java is not JavaScript, C++ and C# are not C and not each other, Go is the language (never “go-to-market”) and R is the language. A posting that names a vendor only as its own employer, an investor or a customer does not count for that vendor’s product.
  • One role is one card: an opening listed for several places counts once on a page. A role listed in several cities counts on each city’s page.
  • A skill has a page when 15 or more roles list it, and a city page when 15 or more do there and it is not the same set of roles as the skill’s own page. Practices that are not one technology (CI/CD, Git, microservices, networking) have none.
  • Salaries are only what employers posted, summarised by the rules of the salary pages: yearly ranges only, one currency per page, a median shown with 15 or more roles. The numbers are rebuilt every day.

The full list: Remote developer roles (1,032 roles posted in the last 7 days). Every skill: developer roles by skill.

SIEM roles elsewhere

Other skills in remote roles

Listed together with SIEM