Senior Threat Detection Engineer - SIEM, Cribl & Automation

TEKsystems; United States; Híbrido; USD 83.000 - 92.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Medical

Dental & Vision

Critical Illness

Accident

401(k) Retirement Plan

Life Insurance

Disability

PTO

Descripción de la vacante

TEKsystems in Greensboro, NC is seeking a contract security operations professional to enhance threat detection, log onboarding, and data quality across the SIEM and Cribl pipeline. The role focuses on incident response backlog, automation of triage, enrichment, and case management, and improving overall visibility in a hybrid work setting.

The position emphasizes tuning to reduce false positives, integrating security data sources, and delivering measurable improvements in MTTR and security

Formación

• They are exploring engineering their own case management solution, so any experience with that would be helpful
• Any experience integrating Salesforce data into Threat Detection Capabilities would be a plus, but not expected.

Responsabilidades

• Onboard and validate priority security log sources to improve overall environment visibility.
• Leverage Cribl for parsing, normalization, enrichment, filtering, and health monitoring to ensure high-quality data throughout the pipeline.
• Expand detection coverage through rule creation, correlation, testing, deployment, and ongoing lifecycle management.
• Reduce false positives and analyst alert fatigue through structured tuning processes and documented exception handling.
• Automate repeatable triage, enrichment, notification, containment, case management, and reporting workflows.
• Drive measurable improvements in MTTR metrics and SecOps KPIs.

Conocimientos

Threat Detection

Log Onboarding

Cribl

Sentinel

SIEM

SEIM

Tuning

SOAR

Security operations

Herramientas

Sentinel

Cribl

Reliaquest

Python

Azure DevOps

Azure Suite

Descripción del empleo

TEKsystems in Greensboro, NC is seeking a contract security operations professional to enhance threat detection, log onboarding, and data quality across the SIEM and Cribl pipeline. The role focuses on incident response backlog, automation of triage, enrichment, and case management, and improving overall visibility in a hybrid work setting.

The position emphasizes tuning to reduce false positives, integrating security data sources, and delivering measurable improvements in MTTR and security