AVP, Cyber Security Engineer, Information Security Services, Group Technology
Core
Subject Matter Expert for the Bank's Security Information and Event Management (SIEM) and User and Entity Behavior Analytics (UEBA) platforms, ensuring high availability, performance, and operational effectiveness.
Role type
Senior IC security monitoring engineer (SIEM/UEBA)
Builds
Security monitoring use cases, correlation rules, behavioral analytics policies, alerts, dashboards, and reporting capabilities
Domain
Financial services / Cybersecurity / Security Operations
Deliverable
production ML models
Required skills
SIEM architecture, log management, event correlation, security analytics, UEBA concepts, detection rule development, log source onboarding, scripting (PowerShell, Python, KQL, SPL), MITRE ATT&CK framework, SOAR integration
Preferred skills
Large-scale enterprise security monitoring, cloud-native security monitoring (Azure, AWS, GCP), regulatory/audit-driven logging requirements
Technologies
Microsoft Sentinel, Splunk Enterprise Security, Exabeam, Securonix, IBM QRadar, ArcSight, LogRhythm, Microsoft Entra ID, SOAR
Responsibilities
Design and tune SIEM correlation rules and UEBA models to improve alert fidelity; Lead onboarding, normalization, and quality assurance of logs from endpoints, servers, applications, network devices, and cloud environments; Collaborate with SOC and infrastructure teams to improve monitoring coverage; Support security investigations through log analysis and event correlation; Manage log source governance and reconciliation activities; Lead platform initiatives including upgrades, architecture enhancements, and automation; Develop operational documentation and standards for security monitoring services.
Seniority
Senior, hands-on IC