Description

You will own the design and implementation of engineering solutions for SIEM and SOAR platforms.

This role is remote.

Responsibilities

• Define SIEM and SOAR platform standards, including data schema, modeling, normalization, monitoring, and alerting.
• Develop scripts and products, including RegEx, for configuring policies to detect security alerts based on threat or anomaly.
• Conduct fraud analysis and threat detection using platform data.
• Manage vendor relationships to drive roadmap, solution design, implementation, and troubleshooting.

Required Skills

• 5+ years of experience in technology, emphasizing cybersecurity.
• 3+ years of experience with SIEM and SOAR products (Splunk, Elastic, Datadog, Cribl).
• 1+ years of experience with Data Lake and Data Warehouse using AWS S3, Snowflake, or Databricks.
• Working knowledge of RegEx and Splunk search language.
• Experience with scripting languages like Python or PowerShell to automate tasks.
• Knowledge of Servers, security platforms, middleware, Clouds (SaaS, PaaS, IaaS), and Containers.

Preferred Skills

• Knowledge and experience in AWS or Azure.

Key Skills

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Technology