Senior SIEM/SOAR & IAM Engineer

Apex Systems; Chandler (AZ); Hybrid; USD 130,000 - 180,000; Full time

Benefits offered by this job

Medical, dental, vision

401K with match

HSA plan

ESPP

EAP with counseling

Training & certifications

Career coaching

Job summary

Everforth Apex is seeking a Senior Cybersecurity Engineer specializing in SIEM/SOAR and IAM to join our onsite Chandler team. You will design detection rules, develop automation playbooks, and optimize Splunk deployments to strengthen threat detection and incident response.

The role requires deep hands‑on IAM and SIEM/SOAR experience, a proven ability to operate under pressure, and collaboration with IT groups to meet SLAs. On‑call availability and after‑hours work may be required.

Qualifications

• Over 10 years of hands‑on IAM experience.
• 5+ years of SIEM/SOAR administration, security operations, and production support.
• Senior‑level production support experience in SIEM/SOAR, Splunk, and IAM technologies.
• Proven ability to work under pressure and handle complex challenges.
• Strong knowledge of ITIL and CI/CD DevOps practices.

Responsibilities

• Manage, configure, and optimize SIEM/SOAR platforms, primarily Splunk.
• Develop and implement detection rules, dashboards, and automation playbooks.
• Monitor and analyze security events to identify threats and reduce incident response times.
• Provide end‑to‑end support for internal customers to meet SLAs.
• Engage in monitoring, incident response, problem triage, and root‑cause analysis.
• Coordinate permanent fixes following best practices.
• Handle on‑call coverage and off‑hours work as needed.

Skills

IAM expertise

SIEM/SOAR

Splunk

SQL queries

Windows

Linux

Automation

ITIL & DevOps

Problem solving

Tools

Splunk

OpenShift

JIRA

GitHub

Ansible

Jenkins

Remedy ITSM

Dynatrace

PowerShell/Unix scripting

Job description

Everforth Apex is seeking a Senior Cybersecurity Engineer specializing in SIEM/SOAR and IAM to join our onsite Chandler team. You will design detection rules, develop automation playbooks, and optimize Splunk deployments to strengthen threat detection and incident response.

The role requires deep hands‑on IAM and SIEM/SOAR experience, a proven ability to operate under pressure, and collaboration with IT groups to meet SLAs. On‑call availability and after‑hours work may be required.