Senior SIEM & Automation Security Engineer

Corebridge Financial; Jersey City (NJ); Hybrid; USD 168,000 - 195,000; Full time

Benefits offered by this job

Discretionary bonus

Hybrid work policy

Professional development

Job summary

Corebridge Financial seeks a Senior Cyber Security Engineer - SIEM and Automation to lead and enhance Detection Engineering capabilities, developing high‑fidelity use cases, optimizing logging strategies, integrating security tools, and tuning alerts to improve signal-to-noise.

You will partner with Security Operations, Threat Intelligence, and Engineering to ensure the SIEM delivers actionable insights, supports rapid incident detection and response, and enables automation through SOAR

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, or related field (or equivalent experience)
• 3–7+ years of experience in SIEM engineering, detection engineering, or security operations
• Hands-on experience with SIEM platforms (e.g., Splunk, Microsoft Sentinel, QRadar, Elastic)
• Strong understanding of log sources (Windows, Linux, cloud platforms, network devices)
• Experience with query languages (e.g., SPL, KQL, Lucene, SQL)
• Knowledge of MITRE ATT&CK framework and adversary tactics/techniques
• Experience onboarding and parsing diverse data sources

Responsibilities

• Use Case Development: Design, develop, and maintain SIEM detection use cases aligned with MITRE ATT&CK and threat intelligence
• Logging & Data Analysis: Define and implement logging requirements across cloud, endpoint, network, and application layers
• Tool Integration & Data Onboarding: Integrate new data sources into the SIEM (e.g., EDR, IAM, firewall, SaaS platforms)
• Alert Tuning & Optimization: Reduce false positives through continuous alert tuning and threshold optimization
• SIEM Platform Engineering: Maintain and optimize SIEM performance, scalability, and cost efficiency
• Collaboration & Continuous Improvement: Partner with Threat Intelligence to operationalize indicators and emerging threats

Skills

SIEM engineering

Detection engineering

Security operations

Threat intelligence integration

MITRE ATT&CK

Data onboarding

Education

Bachelor’s degree in Cybersecurity, Computer Science, or related field

Tools

Splunk

Microsoft Sentinel

QRadar

Elastic

Job description

Corebridge Financial seeks a Senior Cyber Security Engineer - SIEM and Automation to lead and enhance Detection Engineering capabilities, developing high‑fidelity use cases, optimizing logging strategies, integrating security tools, and tuning alerts to improve signal-to-noise.

You will partner with Security Operations, Threat Intelligence, and Engineering to ensure the SIEM delivers actionable insights, supports rapid incident detection and response, and enables automation through SOAR