AVP, Detection Design & SIEM Automation

Deutsche Bank AG; Jacksonville (FL); Hybrid; USD 78,000 - 121,000; Full time

Benefits offered by this job

Hybrid work model

Generous vacation and personal/volunte

Employee Resource Groups

Health and retirement benefits

Educational resources & matching gifts

Volunteer programs

Job summary

Deutsche Bank AG in Jacksonville, FL is seeking a Detection Design Cyber Security Analyst to design, implement, and optimize SIEM-based detections. You will collaborate with operations, engineering, and business units to strengthen threat detection and incident response workflows.

The role emphasizes rule development for Splunk, Microsoft Sentinel, and Google Chronicle, plus automation via SOAR and ongoing professional growth in a dynamic security environment.

Qualifications

• Experience in detection engineering or a related cybersecurity role.
• Hands-on SIEM rule development and content management.
• Familiarity with incident response processes.
• Practical experience with SOAR platforms.
• Solid understanding of networking protocols and security devices.

Responsibilities

• Design, develop, and implement detection rules within SIEM platforms.
• Tune detection rules to reduce false positives and improve coverage.
• Automate security tasks using SOAR to streamline investigations.
• Collaborate with security operations, incident response, engineering and business units.
• Apply traffic analysis and firewall/proxy knowledge to improve detections.
• Continuously learn and share threat intel and techniques.

Skills

Detection engineering

Security operations

SIEM expertise

SOAR platforms

Incident response

Networking fundamentals

Traffic analysis

Tools

Splunk

Microsoft Sentinel

Google Chronicle

Zscaler

Job description

Deutsche Bank AG in Jacksonville, FL is seeking a Detection Design Cyber Security Analyst to design, implement, and optimize SIEM-based detections. You will collaborate with operations, engineering, and business units to strengthen threat detection and incident response workflows.

The role emphasizes rule development for Splunk, Microsoft Sentinel, and Google Chronicle, plus automation via SOAR and ongoing professional growth in a dynamic security environment.