Information Security Lead - Senior SIEM Engineer (Remote)

TE Connectivity; United States; Remote; USD 131,000 - 197,000; Full time

Job summary

An established industry player is seeking a Senior SIEM Engineer to join their dynamic security team. In this pivotal role, you will leverage your expertise to develop advanced detection methods and enhance the organization's security posture against sophisticated cyber threats. You will be responsible for designing and optimizing SIEM solutions, managing log ingestion pipelines, and collaborating closely with the Security Operations Center. This position offers a unique opportunity to contribute to a safer, sustainable, and more connected world while working with a diverse team of professionals. If you're passionate about cybersecurity and thrive in a collaborative environment, this role is perfect for you.

Benefits

Health Insurance

401(k)

Disability Insurance

Life Insurance

Employee Stock Purchase Plan

Paid Time Off

Voluntary Benefits

Qualifications

• 5-7 years of experience in information security focusing on SIEM.
• Expert knowledge of SIEM architecture and log management principles.

Responsibilities

• Design and optimize correlation rules within the SIEM platform.
• Collaborate with SOC to enhance threat detection and response.

Skills

SIEM Administration

Threat Detection

Log Management

Scripting (Python, PowerShell)

Security Best Practices

Incident Response

Collaboration

Education

Bachelor's degree in Computer Science

Equivalent practical experience

Tools

Devo

Splunk

QRadar

Sentinel

ArcSight

Job description

English Debug :RECRUITING_TO_EXPAND_PRESS_ENTER:Collapsed. To expand press enter :RECRUITING_TO_COLLAPSE_PRESS_ENTER:Expanded. To collapse press enter

:RECRUITING_DRAFT_REQ_ID:Requisition ID129334-:POSTED:Posted -ADMINISTRATIVE SUPPORT-United States

At TE, you will unleash your potential working with people from diverse backgrounds and industries to create a safer, sustainable and more connected world.

Job Overview

As a Senior SIEM Engineer, you will be a key member of our collaborative security team, working alongside other security professionals to protect our organization from sophisticated cyberattacks. You will be able to drive innovation in our SIEM program, leveraging your expertise to develop advanced detection methods and improve our overall security posture.

Key Responsibilities:

1. SIEM Engineering & Development: Design, develop, implement, and optimize advanced correlation rules, use cases, and detection logic within the enterprise SIEM platform.
2. Log Source Management: Architect and maintain robust log ingestion pipelines from diverse security and IT systems, ensuring comprehensive data collection, normalization, and parsing.
3. Threat Detection & Analysis: Develop and refine high-fidelity security alerts, dashboards, and reports to enhance threat identification, reduce false positives, and provide actionable insights.
4. Security Operations Collaboration: Collaborate closely with the Security Operations Center (SOC) to optimize response workflows, improve threat detection capabilities, and provide expert-level support during security incidents.
5. Threat Intelligence & Proactive Hunting: Maintain expertise in emerging threats, attack techniques, and security best practices. Proactively hunt for advanced threats and develop new detection methods based on threat intelligence and adversary tactics, techniques, and procedures (TTPs).
6. Automation & Scripting: Automate SIEM tasks, workflows, and integrations using scripting languages (e.g., Python, PowerShell) to improve efficiency and scalability.
7. Documentation & Knowledge Sharing: Develop and maintain comprehensive SIEM documentation, including system architecture diagrams, data flow diagrams, log source configurations, alert rationale, and incident response procedures. Mentor and provide technical guidance to junior security analysts.
8. SIEM Architecture & Strategy: Contribute to the long-term vision and roadmap for SIEM and threat detection capabilities. Identify gaps and opportunities for improvement in existing detection strategies and recommend solutions.
9. Collaboration & Communication: Effectively communicate technical concepts to technical and non-technical audiences. Interface with other IT teams (network, systems, application development, etc.) to ensure security is integrated throughout the infrastructure.
10. Strategic Planning & Budgeting: Collaborate with leadership on strategic planning, budget forecasting, and resource allocation for SIEM-related initiatives.

What your background should look like:

Required Qualifications:

1. Bachelor's degree in Computer Science, Information Security, a related field, or equivalent practical experience.
2. Minimum of 5-7 years of experience in information security, with a strong focus on SIEM administration, engineering, and security operations.
3. Significant experience with at least one enterprise-grade SIEM platform (e.g., Devo, Splunk, QRadar, Sentinel, ArcSight).
4. Expert-level knowledge of SIEM architecture, design, implementation, and administration.
5. Deep understanding of log management principles, log formats, and data normalization techniques.
6. Proficiency in developing advanced correlation rules, use cases, and detection logic within an SIEM platform.
7. Experience with scripting languages (e.g., Python, PowerShell, Regular Expressions) for automation and data manipulation.
8. Familiarity with various operating systems (Windows, Linux, macOS) and cloud platforms (AWS, Azure, GCP).
9. Knowledge of common security frameworks and standards (e.g., NIST, MITRE ATT&CK, CIS).
10. Experience with threat intelligence platforms and data feeds.

Preferred Qualifications:

1. Experience with Devo, Devo SOAR, and/or LogicHub.
2. Advanced programming/coding in one or more languages (C#, Python, etc).
3. Understanding of security concepts, including network security, endpoint security, intrusion detection/prevention systems (IDS/IPS), firewalls, and vulnerability management.
4. Manufacturing and/or engineering industry experience.
5. Experience working in a large global organization.

Education Required/Desired:
Undergraduate degree in business, computer science, management information systems, or other equivalent work experience.

COMPENSATION
• Competitive base salary commensurate with experience: $131,100 - $196,700 (subject to change dependent on physical location)
• Posted salary ranges are made in good faith. TE Connectivity reserves the right to adjust ranges depending on the experience/qualification of the selected candidate as well as internal and external equity.
• Total Compensation = Base Salary + Incentive(s) + Benefits
BENEFITS
• A comprehensive benefits package including health insurance, 401(k), disability, life insurance, employee stock purchase plan, paid time off and voluntary benefits.

EOE, Including Disability/Vets