Security Engineer - Scripting and Automations (Remote)

Experian; Allen (TX); Remote; USD 110,000 - 140,000; Full time

Job summary

A leading technology company is seeking a Security Engineer who will be responsible for managing data feeds from various security tools and ensuring efficient SIEM operations. The ideal candidate will have strong experience in security engineering, cloud migration, and scripting, contributing to the advancement of information security practices. This remote role offers a competitive package with excellent benefits, emphasizing work-life balance and employee well-being.

Benefits

Great compensation package and bonus plan

Flexible work environment

Core benefits including medical, dental, vision

Flexible time off including volunteer time off

Qualifications

• 5+ years experience in security engineering or site reliability engineering.
• Excellent Terraform skills.
• Familiarity with cloud migration and CI/CD pipelines.

Responsibilities

• Manage and improve data feeds from multiple security tools.
• Create use cases based on threat intelligence and performance data.
• Develop custom scripts to enhance SIEM functionality.

Skills

Terraform

Python

Golang

ETL onboarding

Rest API Development

CI/CD Pipelines

Agile Methodologies

Windows Administration

Linux Administration

Job description

Security Engineer - Scripting and Automations (Remote)

Experian is a global data and technology company, powering opportunities for people and businesses around the world. We help to redefine lending practices, uncover and prevent fraud, simplify healthcare, create marketing solutions, and gain deeper insights into the automotive market, all using our unique combination of data, analytics and software. We also assist millions of people to realize their financial goals and help them save time and money.

We operate across a range of markets, from financial services to healthcare, automotive, agribusiness, insurance, and many more industry segments.

We invest in people and new advanced technologies to unlock the power of data. As a FTSE 100 Index company listed on the London Stock Exchange (EXPN), we have a team of 22,500 people across 32 countries. Our corporate headquarters are in Dublin, Ireland. Learn more at experianplc.com

Job Description

Reporting to the Threat Detection Manager, the Security Engineer will work with our teams, including cyber threat intelligence analysts, SOC analysts, threat detection engineers, server and network administrators, security tool administrators, and department customers. You will have information security experience in incident response and understanding of security log feeds mapping the data into the SIEM.

You will:

• Understand data feeds of multiple security tools and logs that feed the SIEM & UEBA technologies. Identify capabilities and quality of these feeds and recommend improvements.
• Create new content use cases based on threat intelligence, analyst feedback, available log data, and previous incidents.
• Perform daily activities of the content life cycle, including creating new use cases, testing content; tuning, and removing content; and maintain associated documentation.
• Improve vulnerabilities in the different application environments.
• Work with the other security teams and product SMEs to identify gaps within the existing capability.
• Develop parsers/field extractions to facilitate reliable content development.
• Develop custom scripts to enhance default SIEM functionality.
• Participate in root cause analysis on security incidents and provide recommendations for new data sources and enrichment.

Qualifications

Qualifications:

• 5+ years experience in security engineering or site reliability engineering.
• Excellent Terraform skills required and experience with Cloud Migration.
• Experience working with and developing CI/CD pipelines for Infrastructure as Code required.
• Knowledge of programming/scripting fundamentals (python/golang) required.
• Expertise in performing ETL onboarding for diverse log feed technologies required.
• Experience supporting a Splunk platform administration, new content dashboards, applications, and use cases.
• Hands-on experience developing Rest API's to capture data from external sources.
• Experience with Agile methodologies.
• Understanding of multiple log formats and source data for SIEM analysis.
• Solid background with Windows and Linux platforms (security or system administration).

Benefits/Perks:

• This role is remote from within the US.
• Great compensation package and bonus plan.
• Core benefits including medical, dental, vision, and matching 401K.
• Flexible work environment, ability to work remote, hybrid or in-office.
• Flexible time off including volunteer time off, vacation, sick and 12-paid holidays.

Additional Information

Our uniqueness is that we celebrate yours. Experian's culture and people are important differentiators. We take our people agenda very seriously and focus on what matters; DEI, work/life balance, development, authenticity, engagement, collaboration, wellness, reward & recognition, volunteering... the list goes on. Experian's people first approach is award-winning; Great Place to Work in 24 countries, FORTUNE Best Companies to work and Glassdoor Best Places to Work (globally 4.4 Stars) to name a few. Check out Experian Life on social or our Careers Site to understand why.

Experian is proud to be an equal opportunity and Affirmative Action employer. Innovation is a critical part of Experian's DNA and practices, and our diverse workforce drives our success. Everyone can succeed at Experian and bring their whole self to work irrespective of their race, color, religion, sex, age, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. If you have a disability or special need that requires accommodation, please let us know at the earliest opportunity.

All your information will be kept confidential according to EEO guidelines.