Senior Cybersecurity (SIEM) Engineer REMOTE

TE Connectivity; United States; Remote; USD 90,000 - 150,000; Full time

Job summary

An established industry player is seeking a Senior SIEM Engineer to join their dynamic security team. In this pivotal role, you will leverage your expertise to enhance the organization's SIEM capabilities, driving innovation and improving the overall security posture. You will be responsible for developing advanced detection methods, managing log ingestion pipelines, and collaborating with the Security Operations Center to respond to incidents. This role offers a unique opportunity to work at the forefront of cybersecurity, where your contributions will directly impact the protection of the organization against sophisticated cyber threats. Join a forward-thinking company that values collaboration and innovation in a rewarding environment.

Qualifications

• 5-7 years of experience in information security with a focus on SIEM.
• Strong understanding of security concepts including IDS/IPS and firewalls.

Responsibilities

• Design and optimize correlation rules and detection logic for SIEM.
• Collaborate with SOC to enhance threat detection and response workflows.

Skills

SIEM Engineering

Threat Detection

Log Source Management

Automation

Scripting (Python, PowerShell)

Collaboration

Security Operations

Education

Bachelor's degree in Computer Science

Bachelor's degree in Information Security

Tools

Devo

Devo SOAR

LogicHub

Job description

At TE, you will unleash your potential working with people from diverse backgrounds and industries to create a safer, sustainable and more connected world.Job Overview

As a Senior SIEM Engineer, you will be a key member of our collaborative security team, working alongside other security professionals to protect our organization from sophisticated cyberattacks. You will have the opportunity to drive innovation in our SIEM program, leveraging your expertise to develop advanced detection methods and improve our overall security posture.

Your main tasks:

1. SIEM Engineering & Development: Design, develop, implement, and optimize advanced correlation rules, use cases, and detection logic within the enterprise SIEM platform.
2. Log Source Management: Architect and maintain robust log ingestion pipelines from diverse security and IT systems, ensuring comprehensive data collection, normalization, and parsing.
3. Threat Detection & Analysis: Develop and refine high-fidelity security alerts, dashboards, and reports to enhance threat identification, reduce false positives, and provide actionable insights.
4. Security Operations Collaboration: Collaborate closely with the Security Operations Center (SOC) to optimize response workflows, improve threat detection capabilities, and provide expert-level support during security incidents.
5. Threat Intelligence & Proactive Hunting: Maintain expertise in emerging threats, attack techniques, and security best practices. Proactively hunt for advanced threats and develop new detection methods based on threat intelligence and adversary tactics, techniques, and procedures (TTPs).
6. Automation & Scripting: Automate SIEM tasks, workflows, and integrations using scripting languages (e.g., Python, PowerShell) to improve efficiency and scalability.
7. Documentation & Knowledge Sharing: Develop and maintain comprehensive SIEM documentation, including system architecture diagrams, data flow diagrams, log source configurations, alert rationale, and incident response procedures.
8. SIEM Architecture & Strategy: Contribute to the long-term vision and roadmap for SIEM and threat detection capabilities. Identify gaps and opportunities for improvement in existing detection strategies and recommend solutions.
9. Collaboration & Communication: Effectively communicate technical concepts to both technical and non-technical audiences. Interface with other IT teams (network, systems, application development, etc.) to ensure security is integrated throughout the infrastructure.
10. Strategic Planning & Budgeting: Collaborate with leadership on strategic planning, budget forecasting, and resource allocation for SIEM-related initiatives.

Your ideal background:

1. Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience.
2. Minimum of 5-7 years of experience in information security, with a strong focus on SIEM administration, engineering, and security operations.
3. Experience with Devo, Devo SOAR, and/or LogicHub.
4. Advanced programming/coding in one or more languages (C#, Python, etc).
5. Understanding of security concepts, including network security, endpoint security, intrusion detection/prevention systems (IDS/IPS), firewalls, and vulnerability management.