Cyber Security Engineer – SIEM/SOAR

Mizuho; United States; Hybrid; USD 111,000 - 140,000; Full time

Benefits offered by this job

Medical

Dental

401K plan

Discretionary bonus

Job summary

Mizuho is seeking a Cyber Security Engineer focused on SIEM/SOAR to support monitoring and incident response automation. You will develop actionable rules, manage data sources, and create log parsers while ensuring regulatory compliance in a highly regulated industry.

You will design detections, write playbooks, gather requirements from IR teams, and deliver complete solutions with documentation, leveraging Python/PowerShell for automation and working within VMware environments and mixed OS,

Qualifications

• Strong hands-on experience with SIEM (Splunk) and SOAR (XSOAR).
• Experience integrating various tools/data sources with SIEM/SOAR.
• Experience developing custom integrations for unsupported data sources/tools.
• Experience performing upgrades and deployment of SIEM/SOAR tools/components/apps/integrations.
• Understanding of the Incident Response Lifecycle.
• Experience developing detection engineering pipelines.
• Experience developing SOAR playbooks from start to finish.
• Experience collecting requirements from security analysts/IR teams.
• Scripting to aid automation (Python/PowerShell).
• Educational background with BS/MS in CS/Engineering/Cyber Security, or similar.
• 7+ years of experience in a similar or related position.

Responsibilities

• Support SIEM, SOAR Run and projects to improve functionality of SIEM/SOAR platforms.
• Support log life cycle management and data retention.
• Maintain performance and uptime of SIEM/SOAR platforms.
• Support platform integrations and data source onboarding.
• Troubleshoot reported issues with tools/platforms.
• Work within tools to support monitoring use cases.
• Interface with vendors for product support and information.

Skills

SIEM Splunk

SOAR XSOAR

Log parsing

Python

PowerShell

Incident response

VMware

Linux

Windows OS

DNS/IP networking

Education

BS/MS in CS/Engineering/Cyber Security

Tools

JIRA

Gitlab

Ansible

Job description

Join Mizuho as a Cyber Security Engineer – SIEM/SOAR! In this role you will be responsible for supporting Mizuho’s needs to support Cyber Security Monitoring and Incident Response automation. You will be expected to support these platforms via projects and various BAU activities. You should be experienced in developing actionable cyber security rules and effective automations. You must have experience and understanding of the data provided by security tools and other platforms to effectively manage cyber security functions. You must show aptitude in handling custom data sources and writing and adjusting log parsers. You should will be expected to gather requirements of detections and playbooks, outline the required steps to take, and deliver a complete solution with proper documentation. Additionally, there is an expectation to ensure compliance with regulatory requirements as Mizuho operates in a highly regulated industry.

Major Responsibilities

• Support SIEM, SOAR Run and support projects related to improving the functionality of SIEM and SOAR platforms
• Support log life cycle management
• Maintain performance and support uptime of SIEM and SOAR platforms.
• Support platform integrations and data source onboarding
• Troubleshooting of reported issues with tools/platforms.
• Work within tools to support monitoring use cases
• Interface with vendors for support and information on products

Required Qualifications

• Strong hands-on technical experience with SIEM (Splunk) and SOAR (XSOAR) tools mentioned in the job description.
• Experience with integrating various tools/data sources with SIEM/SOAR tools
• Experience developing custom integrations for unsupported data sources/tools
• Experience performing upgrades and deployment of SIEM/SOAR tools/components/apps/integrations
• Understanding of the Incident Response Lifecycle
• Experience developing detection engineering pipelines
• Experience developing SOAR playbooks from start to finish
• Experience collecting requirements from security analysts/IR teams
• Experience working supporting Servers/Appliances through VMware
• Understanding of DNS and IP networking
• Strong troubleshooting/root cause analysis skills
• Self-driven – ability to take requirements/tasks and complete independently
• Strong communication skills to report on risks to the organization and project commitments/deliverables
• Understanding of the Incident Response life cycle is required as engineering may serve as an escalation point for Security Operations.
• Working knowledge of Linux (RHEL) and Windows OSes required.
• Ability to script/code to aid automation required – preferably Python or PowerShell.
• High attention to detail.
• Educational background with BS/MS in Computer Science, Computer Engineering, Information Technology, Cyber Security, or similar
• 7+ years of experience in a similar or related position.

Additional Qualifications

• Experience with the following tools are a plus: CrowdStrike EPP
• Other SIEMs/SOARs
• Netskope or other SASE
• Next Gen Firewalls
• Tenable
• ExtraHop/Reveal(x)
• Cisco Umbrella
• DUO
• LastPass
• JIRA, Gitlab, Ansible
• Experience working with the Financial Services Industry
• Previous experience in system/network administration, software development or desktop engineering a plus

Hybrid position in NYC/NJ. May be required to be on-call with a rotating schedule. The expected base salary ranges from $111,000 - $140,000. Salary offers are based on a wide range of factors including relevant skills, training, experience, education, and, where applicable, certifications and licenses obtained. Market and organizational factors are also considered.

In addition to salary and a generous employee benefits package, including Medical, Dental and 401K plans, successful candidates are also eligible to receive a discretionary bonus.

#LI-Hybrid

Other requirements Mizuho has in place a hybrid working program, with varying opportunities for remote work depending on the nature of the role, needs of your department, as well as local laws and regulatory obligations. Roles in some of our departments have greater in-office requirements that will be communicated to you as part of the recruitment process.

Company Overview Mizuho Financial Group, Inc. is the 15th largest bank in the world as measured by total assets of ~$2 trillion. Mizuho's 60,000 employees worldwide offer comprehensive financial services to clients in 35 countries and 800 offices throughout the Americas, EMEA and Asia. Mizuho Americas is a leading provider of corporate and investment banking services to clients in the US, Canada, and Latin America. Through its acquisition of Greenhill, Mizuho provides M&A, restructuring and private capital advisory capabilities across Americas, Europe and Asia. Mizuho Americas employs approximately 3,500 professionals, and its capabilities span corporate and investment banking, capital markets, equity and fixed income sales & trading, derivatives, FX, custody and research. Visit www.mizuhoamericas.com. Mizuho Americas offers a competitive total rewards package. We are an EEO/AA Employer - M/F/Disability/Veteran. We participate in the E-Verify program. We maintain a drug-free workplace and reserve the right to require pre- and post-hire drug testing as permitted by applicable law.

#LI-MIZUHO

Why Mizuho Mizuho is in growth mode as we are climbing the league tables, disrupting the status quo, and attracting top talent. Positions are available across our corporate functions, and on our corporate and investment banking, capital markets, advisory, research, sales & trading, derivatives, and financing teams. We are looking for candidates who want to contribute to our entrepreneurial culture where people at all levels are inspired to share ideas. Our creativity sets us apart, and our perseverance drives results in creating bespoke, client-focused solutions. If you are interested in advancing your career working for a firm with a growth mindset and the resources of a global financial services team, we would like to hear from you. For more information, please view our Recruiting Brochure