SIEM Engineer

A SIEM engineer at IDB Bank in New York who designs, runs and improves the bank's security event management platform in support of security operations. The engineer onboards and normalises logs from firewalls, IDS, EDR, identity and cloud platforms, builds and tunes ATT&CK-mapped correlation rules with red, purple and threat intelligence teams, supports SOC analysts and incident responders, writes hunting queries, integrates threat feeds and SOAR, automates administration, and keeps retention and reporting in line with regulatory needs.

The bank wants five or more years in cybersecurity, three or more engineering SIEM platforms such as Sentinel, Splunk, QRadar or CrowdStrike, SOC and incident response experience, and KQL, PowerShell, Python and SQL skills. SC-200, GCIH or GCIA is preferred. Hybrid schedule.