{"product_id":"zoltan-siem-security-data-platform-engineer","title":"Zoltan — SIEM \u0026 Security Data Platform Engineer AI Skill","description":"\u003cdiv style=\"font-family: 'DM Sans', sans-serif; color: #1A1A18; max-width: 680px;\"\u003e\n  \u003cp style=\"font-size: 16px; font-weight: 600; line-height: 1.5; margin: 0 0 8px 0;\"\u003eDrop Zoltan into Claude and get a security data platform engineer who fixes the log pipeline your detections quietly depend on, and cuts ingest cost without losing coverage.\u003c\/p\u003e\n  \u003cp style=\"font-size: 13px; color: #555550; line-height: 1.7; margin: 0 0 28px 0;\"\u003eZoltan owns the security data plane: log source onboarding and coverage mapped against the data sources ATT\u0026amp;CK techniques actually require, parsing and normalisation to OCSF, ECS, ASIM or CIM, ingestion pipelines and routing with Cribl, Vector, Logstash, Fluent Bit and Kafka, SIEM platform engineering on Splunk, Microsoft Sentinel, Elastic and Chronicle plus the security data lake pattern, hot, warm, cold and archive tiering against real retention obligations, ingest cost reduction that does not silently delete detection coverage, timestamp, timezone and clock-skew failures, enrichment with asset, identity, geo and threat intel at ingest, query performance and search cost, pipeline monitoring that catches the silent log-source outage, and SIEM-to-SIEM migration without a detection gap. He owns the plumbing and the platform, not the detection content.\u003c\/p\u003e\n  \u003cdiv style=\"background: #fbeff3; border-radius: 12px; padding: 24px 28px; margin-bottom: 24px;\"\u003e\n    \u003cp style=\"font-size: 10px; font-weight: 600; color: #d3225d; letter-spacing: 0.08em; text-transform: uppercase; margin: 0 0 16px 0;\"\u003eWhat you get\u003c\/p\u003e\n    \u003cul style=\"margin: 0; padding: 0; list-style: none;\"\u003e\n\u003cli style=\"font-size: 13px; padding: 7px 0; border-bottom: 1px solid rgba(211,34,93,0.14); display: flex; gap: 10px;\"\u003e\n\u003cspan style=\"color:#d3225d; font-weight:600;\"\u003e→\u003c\/span\u003e\u003cspan\u003eLog source onboarding and ATT\u0026amp;CK coverage mapping\u003c\/span\u003e\n\u003c\/li\u003e\n\u003cli style=\"font-size: 13px; padding: 7px 0; border-bottom: 1px solid rgba(211,34,93,0.14); display: flex; gap: 10px;\"\u003e\n\u003cspan style=\"color:#d3225d; font-weight:600;\"\u003e→\u003c\/span\u003e\u003cspan\u003eNormalisation to OCSF, ECS, ASIM or CIM at scale\u003c\/span\u003e\n\u003c\/li\u003e\n\u003cli style=\"font-size: 13px; padding: 7px 0; border-bottom: 1px solid rgba(211,34,93,0.14); display: flex; gap: 10px;\"\u003e\n\u003cspan style=\"color:#d3225d; font-weight:600;\"\u003e→\u003c\/span\u003e\u003cspan\u003eIngest routing, tiering and cost reduction without coverage loss\u003c\/span\u003e\n\u003c\/li\u003e\n\u003cli style=\"font-size: 13px; padding: 7px 0;  display: flex; gap: 10px;\"\u003e\n\u003cspan style=\"color:#d3225d; font-weight:600;\"\u003e→\u003c\/span\u003e\u003cspan\u003ePipeline monitoring that catches the silent log outage\u003c\/span\u003e\n\u003c\/li\u003e\n    \u003c\/ul\u003e\n  \u003c\/div\u003e\n  \u003cdiv style=\"display:flex; align-items:center; gap:20px; background:#FFFFFF; border:1px solid #E8E6E0; border-radius:8px; padding:14px 20px; margin-bottom:24px;\"\u003e\n    \u003cspan style=\"font-size:11px; color:#888780; font-family:monospace;\"\u003e📄 zoltan-siem-security-data-platform-engineer.skill\u003c\/span\u003e\n    \u003cspan style=\"font-size:11px; color:#888780;\"\u003eUnder 2 min install\u003c\/span\u003e\n    \u003cspan style=\"font-size:11px; color:#888780;\"\u003eWorks with Claude, ChatGPT \u0026amp; any AI chat\u003c\/span\u003e\n  \u003c\/div\u003e\n  \u003cdiv style=\"border-left:3px solid #d3225d; padding-left:16px;\"\u003e\n    \u003cp style=\"font-size:10px; font-weight:600; color:#d3225d; letter-spacing:0.08em; text-transform:uppercase; margin:0 0 6px 0;\"\u003eHow to install\u003c\/p\u003e\n    \u003cp style=\"font-size:12px; color:#555550; line-height:1.7; margin:0;\"\u003eDownload the .skill package, open Claude, paste SKILL.md into your Project Instructions or system prompt, describe your requirement, and Zoltan builds the answer. Includes a full worked example so you see exactly what you get.\u003c\/p\u003e\n  \u003c\/div\u003e\n\u003c\/div\u003e","brand":"KissMySkills","offers":[{"title":"Default Title","offer_id":58390131212552,"sku":null,"price":14.99,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1036\/1444\/7880\/files\/a4f98969-3620-4e9d-9e10-a990711255d2.png?v=1786112769","url":"https:\/\/kissmyskills.com\/sv\/products\/zoltan-siem-security-data-platform-engineer","provider":"KissMySkills","version":"1.0","type":"link"}