SIEM Engineer — Detection, Automation & Hybrid Cloud

IDB Bank; New York (NY); Hybrid; USD 120,000 - 180,000; Full time

Job summary

IDB Bank is seeking an experienced SIEM Engineer to design, implement, and optimize the organization’s SIEM across on‑prem, cloud, and hybrid environments. You will work with SOC analysts, incident responders, and threat intelligence teams to strengthen cyber defense posture.

Responsibilities include developing detection use cases, integrating diverse log sources, and tuning alerts to reduce false positives while ensuring scalable, reliable SIEM operations.

Qualifications

• 5+ years of cybersecurity experience.
• 3+ years managing and engineering SIEM platforms.
• Experience supporting SOC operations and incident response.
• Experience in financial services or regulated industries preferred.

Responsibilities

• SIEM Administration & Engineering: Manage and maintain enterprise SIEM platforms.
• Configure and optimize log ingestion, normalization, parsing, and retention.
• Integrate security data sources including Firewalls, IDS/IPS, EDR/XDR, Active Directory / Entra ID, Cloud platforms (Azure, AWS, GCP).
• Ensure availability, scalability, and performance of SIEM infrastructure.
• Detection Engineering & Use Case Development: Develop correlation rules, analytics, and detection content.
• Create use cases aligned with MITRE ATT&CK techniques, tune rules to reduce false positives.
• Threat Hunting & Threat Intelligence Integration: Develop hunting queries and ingest feeds into SIEM.
• Automation & Optimization: Automate SIEM tasks and integrate with SOAR.

Skills

SIEM platforms

Log ingestion

Detection engineering

Threat hunting

PowerShell

Python

KQL

SQL

Tools

Microsoft Sentinel

Splunk

QRadar

LogRhythm

Elastic Security

CrowdStrike NG-SIEM

Cribl

Job description

IDB Bank is seeking an experienced SIEM Engineer to design, implement, and optimize the organization’s SIEM across on‑prem, cloud, and hybrid environments. You will work with SOC analysts, incident responders, and threat intelligence teams to strengthen cyber defense posture.

Responsibilities include developing detection use cases, integrating diverse log sources, and tuning alerts to reduce false positives while ensuring scalable, reliable SIEM operations.