Principal SIEM Engineer - Vice President
Core
Design and manage SIEM platforms and detection logic to identify and respond to sophisticated security threats within a global financial institution's cyber response infrastructure.
Role type
Principal SIEM Engineer (Cyber Security)
Builds
Security analytics, detection rules, alerting mechanisms, dashboards, and automated response workflows for SOC infrastructure.
Domain
Cybersecurity / Financial Services
Required skills
SIEM rule tuning, correlation logic, alert de-duplication, MITRE ATT&CK, Indicators of Compromise (YARA, STIX, TAXII), data normalization, CI/CD, Python scripting
Preferred skills
SOAR automation, Elastic Search analytics, cross-functional collaboration
Technologies
Elastic Search, Splunk, ArcSight, Microsoft Sentinel, Palo Alto XSOAR, SumoLogic, Swimlane, Kafka, NiFi, Spark, Jenkins, GitLab CI, GitHub Actions
Responsibilities
Develop analytics in Elastic Search to detect actionable security alerts; Monitor and support SIEM platforms to ensure security and stability of SOC infrastructure; Create comprehensive security metrics, reports, and dashboards; Collaborate with cross-functional teams to integrate SIEM capabilities into cyber response workflows.
Seniority
Principal, hands-on IC
