SIEM Engineer If you are a Security Engineer with Splunk, Logrhythm and Exabeam experience, please read on!
Our organization is based out of Texas, our platform delivers positive security outcomes with NO infrastructure to manage. It provides analytics-driven next-generation SIEM, UEBA, and security data lake capabilities as a pure cloud solution, without compromise. We are here to help with resolving existing problems and preparing our customers for the future.
Top Reasons to Work with Us Opportunity to work with cutting edge technology!
Room for growth within the organization!
What You Will Be Doing In this role, you will be leading end to end SIEM implementation or integrations in a customer environment.
You will need to understand our customers business requirements and the threat landscape applicable to their industrys vertical sector to develop tailored success criteria.
You will also analyze complex customer networks and develop deployment architecture.
You will coordinate with team members throughout the organization, including service delivery managers, management, engineering, maintenance, and operational support teams.
You will develop content, use cases, data models, dashboards, and connectors to support custom user requirements.
You will take an active role in engaging with our customers and internal product development teams to gather user requirements and suggest new product features and help improve existing product features.
You will also be responsible for training and enabling customers and partners for successful adoption.
What You Need for this Position Minimum of 4 years of experience and knowledge of in the information security field
Highly preferred BS in Computer Science, Information Systems or CyberSecurity
3-4 years in SIEM/UEBA deployment - Strong understanding of SIEM and UEBA solutions such as Splunk, Logrhythm and Exabeam.
Solid understanding of MITRE ATT&CK matrices, kill chains and other attack models.
Strong communication skills across all levels of an organization from Engineering/Operations to CIO/CISO audiences
You must have strong knowledge of scripting languages such as Python, Powershell.
Required industry certifications such as CISSP, CISM
Working knowledge of Machine learning in cybersecurity and Cloud technologies such as Amazon, Azure and Google
Understand log collection methodologies and aggregation techniques such as Syslog-NG, Nxlog, Windows Event Forwarding
Should understand Hadoop ecosystem and Apache technologies
Experience integrating endpoint security and host based intrusion detection solutions
Experience with network forensics and toolsets such as Wireshark, PCAP, tcpdump
-Active Top Secret Clearance with SCI (poly eligibility)
Familiarity with the following:
- Network/Host/Data/Application Security
- IP Networking
- Networking Protocols
- Security Related Technologies
- Internet/Web/Application/Network Security
- Firewall/Network Scanning/Intrusion Detection
What's In It for You - Competitive Salary!
- Great health coverage!
- 401K with competitive matching!
- Above average PTO each year!
So, if you have the right SIEM Engineering experience and a TS Security Clearance, please get in touch with me and apply today at firstname.lastname@example.org.
- Applicants must be authorized to work in the U.S.
*CyberCoders, Inc is proud to be an Equal Opportunity Employer*
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, protected veteran status, or any other characteristic protected by law.
*Your Right to Work* - In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification document form upon hire.