Principal SIEM Engineer - Vice President
Core
Develop analytics in Elastic Search, fine-tune detection rules, and monitor SIEM platforms to detect and respond to sophisticated security threats within the Cyber Response Platforms team.
Role type
Senior IC SIEM Engineer (Cyber Security)
Builds
Security analytics, detection rules, alerting mechanisms, and security dashboards for the organization's SOC infrastructure.
Domain
Financial Services / Cyber Security
Required skills
SIEM rule tuning, correlation logic, alert de-duplication, MITRE ATT&CK, Indicators of Compromise (YARA, STIX, TAXII), data normalization (Kafka, NiFi, Spark), CI/CD (Jenkins, GitLab CI, GitHub Actions), Python scripting
Preferred skills
SOAR automation (Palo Alto XSOAR, SumoLogic, Swimlane), Elastic Search development
Technologies
Elastic Search, Splunk, ArcSight, Microsoft Sentinel, Palo Alto XSOAR, SumoLogic, Swimlane, Kafka, NiFi, Spark, Jenkins, GitLab CI, GitHub Actions, Python
Responsibilities
Develop analytics in Elastic Search to detect actionable security alerts; Monitor and support SIEM platforms to ensure security and stability of SOC infrastructure; Create comprehensive security metrics, reports, and dashboards; Collaborate with cross-functional teams to integrate SIEM capabilities into cyber response workflows.
Seniority
Senior, hands-on IC
