Senior SIEM Architect & Threat Detection Leader

Ally Bank; Detroit (MI); Hybrid; USD 110,000 - 180,000; Full time

Benefits offered by this job

Total Rewards program

Time Away: 20 PTO days plus holidays

Relocation assistance

Signing bonus

Job summary

Ally Financial is seeking a Principal Cyber Security Engineer with hands-on experience designing, deploying, and optimizing SIEM platforms at scale. You will own the end-to-end lifecycle from architecture and data onboarding to content engineering, automation, and continuous improvement.

You will collaborate with SOC analysts, incident responders, threat hunters, IT operations, and application teams to ensure high-fidelity detections, actionable visibility, and compliant log management across

Qualifications

• 5+ years of experience in SIEM engineering or related security roles.
• Bachelor’s degree in Computer Science, Information Security, or related field; or equivalent experience.
• Proven end-to-end expertise with at least one enterprise SIEM (Splunk preferred).

Responsibilities

• Design and maintain SIEM architecture, data ingestion, parsers, storage, and retention.
• Onboard logs from diverse sources and ensure data quality monitoring.
• Collaborate with SOC, incident responders, threat hunters, and IT teams to ensure detections and visibility.

Skills

SIEM engineering

Security architecture

Data parsing

Scripting/automation

Education

Bachelor's degree in Computer Science or related field

Tools

Splunk

Cribl

Job description

Ally Financial is seeking a Principal Cyber Security Engineer with hands-on experience designing, deploying, and optimizing SIEM platforms at scale. You will own the end-to-end lifecycle from architecture and data onboarding to content engineering, automation, and continuous improvement.

You will collaborate with SOC analysts, incident responders, threat hunters, IT operations, and application teams to ensure high-fidelity detections, actionable visibility, and compliant log management across