AI-Enhanced SIEM Cyber Defense Engineer

NorthMark Strategies LLC; New York (NY); On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Medical coverage

Dental & Vision

401(k) match

PTO 25 days + 12 holidays

16 weeks parental leave

Lunch stipend (GrubHub)

Employee assistance program

Life insurance

Disability insurance

Job summary

NorthMark Strategies LLC is seeking a Cyber Defense Engineer – SIEM to architect and implement AI‑driven detections and automation within the SIEM/SOAR stack. You will enhance cyber defense investigations and incident response capabilities across our security program.

The role emphasizes AI/ML for anomaly detection, UEBA, threat correlation, and automated playbooks, collaborating with IT and engineering to ensure telemetry quality and scalable data pipelines.

Qualifications

• Bachelor’s degree in CS, information security, or a related field.
• 4–6+ years in cybersecurity engineering, SOC engineering, or insider threat.
• Demonstrated SIEM engineering and security monitoring at scale.
• Experience integrating or developing AI/ML capabilities within security operations.

Responsibilities

• Design, develop, and deploy AI-enhanced detections and automations within the SIEM/SOAR platform.
• Engineer and optimize SIEM pipelines using AI/ML techniques for anomaly detection and threat correlation.
• Integrate SIEM with security tools and data sources for a richer monitoring ecosystem.
• Develop AI-assisted threat detection models, including UEBA and predictive analytics.
• Collaborate with cyber defense operations to identify threats and capability gaps.
• Build and maintain automated response orchestration and intelligent playbooks.

Skills

SIEM engineering

AI/ML security

Automation scripting

KQL

Python

PowerShell

API development

Log ingestion

Multi-tenant environments

Self-starter

Education

Bachelor's degree in CS or related field

Tools

Azure Sentinel

Microsoft Defender Suite

SIEM/SOAR tooling

Job description

NorthMark Strategies LLC is seeking a Cyber Defense Engineer – SIEM to architect and implement AI‑driven detections and automation within the SIEM/SOAR stack. You will enhance cyber defense investigations and incident response capabilities across our security program.

The role emphasizes AI/ML for anomaly detection, UEBA, threat correlation, and automated playbooks, collaborating with IT and engineering to ensure telemetry quality and scalable data pipelines.