Use Case Development: Design, develop, and maintain SIEM detection use cases aligned with MITRE ATT&CK and threat intelligence.
Logging & Data Analysis: Define and implement logging requirements across cloud, endpoint, network, and application layers.
Tool Integration & Data Onboarding: Integrate new data sources into the SIEM (e.g., EDR, IAM, firewall, SaaS platforms).
Alert Tuning & Optimization: Reduce false positives through continuous alert tuning and threshold optimization.
SIEM Platform Engineering: Maintain and optimize SIEM performance, scalability, and cost efficiency.
Collaboration & Continuous Improvement: Partner with Threat Intelligence to operationalize indicators and emerging threats.

Bachelor’s degree in Cybersecurity, Computer Science, or related field (or equivalent experience)
3–7+ years of experience in SIEM engineering, detection engineering, or security operations
Hands-on experience with SIEM platforms (e.g., Splunk, Microsoft Sentinel, QRadar, Elastic)
Strong understanding of log sources (Windows, Linux, cloud platforms, network devices)
Experience with query languages (e.g., SPL, KQL, Lucene, SQL)
Knowledge of MITRE ATT&CK framework and adversary tactics/techniques
Experience onboarding and parsing diverse data sources
Experience with SOAR platforms and security automation (Preferred)
Familiarity with cloud environments (AWS, Azure, GCP) and their native logging tools (Preferred)
Scripting or programming skills (Python, PowerShell, etc.) (Preferred)
Experience with detection-as-code and version control practices (Preferred)
Security certifications (e.g., GCIA, GCIH, CISSP, Splunk Certified, Microsoft SC-200) (Preferred)

Health and Wellness: We offer a range of medical, dental and vision insurance plans, as well as mental health support and wellness initiatives to promote overall well-being.
Retirement Savings: We offer retirement benefits options, which vary by location. In the U.S., our competitive 401(k) Plan offers a generous dollar-for-dollar Company matching contribution of up to 6% of eligible pay and a Company contribution equal to 3% of eligible pay (subject to annual IRS limits and Plan terms). These Company contributions vest immediately.
Employee Assistance Program: Confidential counseling services and resources are available to all employees.
Matching charitable donations: Corebridge matches donations to tax-exempt organizations 1:1, up to $5,000.
Volunteer Time Off: Employees may use up to 16 volunteer hours annually to support activities that enhance and serve communities where employees live and work.
Paid Time Off: Eligible employees start off with at least 24 Paid Time Off (PTO) days so they can take time off for themselves and their families when they need it.

Senior Cyber Security Engineer – SIEM, Automation

Key skills