AVP, Cyber Security Engineer, Information Security Services, Group Technology
Core
Subject Matter Expert for SIEM and UEBA platforms, designing monitoring use cases, tuning detection rules, and managing log onboarding to improve security visibility and alert fidelity.
Role type
Senior IC Cyber Security Engineer (SIEM/UEBA)
Builds
Security monitoring dashboards, correlation rules, behavioral analytics policies, and automated detection workflows
Domain
Financial Services / Cyber Security
Deliverable
production ML models
Required skills
SIEM architecture, UEBA concepts, log management, event correlation, security analytics, log source onboarding, data quality validation, scripting (PowerShell, Python, KQL, SPL), MITRE ATT&CK framework
Preferred skills
SOAR technologies, cloud-native security monitoring (Azure, AWS, GCP), regulatory/audit-driven logging requirements
Technologies
Microsoft Sentinel, Splunk Enterprise Security, Exabeam, Securonix, IBM QRadar, ArcSight, LogRhythm, Microsoft Entra ID, Active Directory, SOAR
Responsibilities
Design and develop security monitoring use cases and correlation rules; Lead onboarding and normalization of logs from endpoints, servers, and cloud environments; Tune UEBA models to identify anomalous user activities and insider risks; Collaborate with SOC and infrastructure teams to improve detection capabilities; Manage log source governance and reconciliation activities; Lead platform initiatives including upgrades and automation; Provide technical leadership on logging strategies and monitoring requirements
Seniority
Senior, hands-on IC
