Hybrid SIEM Engineer — Detection & Automation

IDBNY; New York (NY); Hybrid; USD 140,000 - 160,000; Full time

Benefits offered by this job

Annual bonus

Medical, dental, and vision plans

Life and disability insurance

Retirement and employer contributions

Hybrid schedule

Paid holidays and time off

Parental leave

Tuition reimbursement

Job summary

IDB Bank in New York seeks a SIEM Engineer to design, implement, maintain, and optimize its SIEM across on‑prem, cloud, and hybrid environments. You will develop detection use cases, integrate log sources, and improve threat visibility to power incident response.

Role requires 5+ years in cybersecurity and 3+ years engineering SIEM platforms, with a track record supporting SOC operations. Hybrid work is offered with a comprehensive rewards package and certifications as described in the posting.

Qualifications

• 5+ years in cybersecurity with SIEM focus.
• 3+ years engineering and managing SIEM platforms.
• Experience supporting SOC operations and incident response.
• Financial services or regulated industry background preferred.
• Proficient in SIEM platforms and threat hunting.

Responsibilities

• Design, implement, maintain and optimize enterprise SIEM platforms.
• Develop detection use cases and correlation rules for MITRE ATT&CK.
• Ingest, parse, normalize, and retain security logs from multiple sources.
• Support SOC with advanced threat detection and incident analysis.
• Automate SIEM tasks and integrate with SOAR and ticketing systems.
• Produce dashboards and security metrics for leadership.

Skills

5+ years cybersecurity experience

3+ years SIEM engineering

Detection engineering

Threat hunting methodologies

MITRE ATT&CK mapping

Scripting: PowerShell, Python, SQL

KQL experience

Tools

Microsoft Sentinel

Splunk

QRadar

LogRhythm

Elastic Security

CrowdStrike NG-SIEM

Cribl

Job description

IDB Bank in New York seeks a SIEM Engineer to design, implement, maintain, and optimize its SIEM across on‑prem, cloud, and hybrid environments. You will develop detection use cases, integrate log sources, and improve threat visibility to power incident response.

Role requires 5+ years in cybersecurity and 3+ years engineering SIEM platforms, with a track record supporting SOC operations. Hybrid work is offered with a comprehensive rewards package and certifications as described in the posting.