Senior Cybersecurity Operations & SIEM Lead

University of Colorado; Boulder (CO); Hybrid; USD 100,000 - 110,000; Full time

Job summary

CU Boulder is seeking a Senior Cybersecurity Operations Engineer within the Office of Information Technology. The role leads security incident response and detection engineering, ensuring reliable log ingestion, detections, dashboards, and automation to improve response workflows.

The position reports to the Security Operations Senior Program Manager and collaborates with IT providers and system owners across campus. A hybrid work arrangement is available.

Qualifications

• Bachelor's degree in cybersecurity, computer science or related field is required.
• 3+ years in cybersecurity operations, incident response, or security monitoring.
• Experience investigating events using telemetry across endpoints, networks, identity, cloud, and applications.

Responsibilities

• Lead or support cybersecurity incidents through complete lifecycle steps.
• Coordinate response with security personnel and IT providers.
• Develop detections and dashboards to support monitoring.
• Mentor colleagues and student employees when assigned.

Skills

Incident response

Detections development

Security monitoring

Threat hunting

Mentoring

Education

Bachelor's degree in cybersecurity, computer science, information technology, engineering, or related field

Tools

SIEM platform

EDR/XDR

Python scripting

PowerShell

Dashboards & reporting

Job description

CU Boulder is seeking a Senior Cybersecurity Operations Engineer within the Office of Information Technology. The role leads security incident response and detection engineering, ensuring reliable log ingestion, detections, dashboards, and automation to improve response workflows.

The position reports to the Security Operations Senior Program Manager and collaborates with IT providers and system owners across campus. A hybrid work arrangement is available.