Cloud SIEM Engineer

Tek Ninjas - Denver, CO

Full-time - Mid Level

Denver, CO

About the position

The Cloud SIEM Engineer will play a crucial role in enhancing the organization's security posture by driving detection engineering within AWS environments. This position involves collaboration with a talented team to develop and optimize SIEM and SOAR capabilities, ensuring effective threat detection and incident response. The role is hybrid, requiring presence in Chicago, Denver, or Washington, D.C. three times a week, and has the potential for full-time conversion after 18 months.

Responsibilities

• Work as an Individual Contributor with a talented team to drive Detection Engineering in SIEM or SOAR within AWS environments.
• Enhance SIEM and SOAR capabilities by coding, testing, and deploying custom applications.
• Integrate various data sources and security tools to improve threat detection and response.
• Develop strategies for proactive threat detection and efficient incident response.
• Analyze security incidents and collaborate with the Incident Response team to refine procedures.
• Monitor and optimize SIEM and SOAR systems, implementing upgrades to support growing data volumes and conducting load testing to ensure performance.

Requirements

• Proficient in AWS and/or Azure.
• Familiarity with WIZ for security posture management.
• Proficient in Splunk querying and tools like Microsoft Sentinel, IBM Qraded, Securonix, Exabeam Fusion, and LogRhythm SIEM.

Nice-to-haves

• Experience with Anvilogic for implementation in banking environments.

Benefits

• Potential to convert to full-time after 18 months
• Hybrid work environment (3x a week in office)