Lead SIEM & Incident-Response Engineer

University of Colorado Boulder; Boulder (CO); Hybrid; USD 100,000 - 110,000; Full time

Benefits offered by this job

Medical, dental, and retirement plans

Tuition assistance for you and your/de

Transit ECO Pass

Job summary

University of Colorado Boulder is seeking a Senior Cybersecurity Operations Engineer to lead incident response, detection engineering, and security monitoring efforts. The role oversees log-ingestion pipelines, detections, dashboards, and automation to improve response workflows.

The Senior Engineer collaborates with IT providers, system owners, and university partners, translating technical findings into risk insights and actionable improvements. Hybrid work is available.

Qualifications

• Bachelor's degree in cybersecurity, computer science, information technology, engineering, or a related field.
• Demonstrated 3+ years of cybersecurity operations, incident response, or security monitoring.
• Experience investigating cybersecurity events using telemetry from endpoints, networks, email, cloud, or applications.

Responsibilities

• Lead or support cybersecurity incidents through detection, containment, and post-incident review.
• Design, develop, test, deploy, document, and tune detections across multiple data sources.
• Develop dashboards, searches, alerts, reports, and coverage metrics for monitoring and leadership awareness.
• Maintain incident‑response playbooks, runbooks, and escalation procedures; translate findings into risk and remediation recommendations.
• Mentor colleagues and student employees as needed.

Skills

Cybersecurity operations

Incident response

Security monitoring

Detection engineering

Scripting (Python/PowerShell)

Communication

Mentoring

Collaboration

Education

Bachelor's degree in cybersecurity/CS/IT/engineering

Tools

SIEM

EDR/XDR

Log ingestion pipelines

Job description

University of Colorado Boulder is seeking a Senior Cybersecurity Operations Engineer to lead incident response, detection engineering, and security monitoring efforts. The role oversees log-ingestion pipelines, detections, dashboards, and automation to improve response workflows.

The Senior Engineer collaborates with IT providers, system owners, and university partners, translating technical findings into risk insights and actionable improvements. Hybrid work is available.