SIEM Engineer: Real-Time Threat Detection & Automation

Teladoc Health; United States; À distance; USD 90 000 - 150 000; Plein temps

Résumé du poste

Teladoc Health is seeking an experienced SIEM Engineer to join the SOC and design, implement, and manage SIEM systems protecting assets against cyber threats. You will monitor, analyze, and respond to security incidents, optimize SIEM platforms, and work with cross-functional teams to strengthen security posture.

The role emphasizes incident analysis, log ingestion from networks and cloud services, and developing automated detections and response playbooks.

Qualifications

• Bachelor’s degree in CS/IT/Cybersecurity or related field.
• 4–5 years in cybersecurity with at least 2 years in SIEM administration.
• Hands-on experience with SIEM platforms such as Sentinel, Splunk, QRadar, ArcSight, or LogRhythm.
• Experience in SOC environments and incident response.
• Strong scripting skills (Python/PowerShell) for automation.

Responsabilités

• Configure, manage, and maintain SIEM platforms for log collection, correlation, and alerts.
• Develop, tune use cases and playbooks for threat detection and response.
• Triage, analyze, and investigate security alerts and incidents; escalate when needed.
• Ingest logs from firewalls, IDS/IPS, endpoints, and cloud platforms (AWS/Azure).
• Optimize SIEM alerts to reduce false positives and improve detection accuracy.
• Collaborate with SOC and IT teams for threat mitigation and remediation.
• Produce reports on SIEM performance, incidents, and trends; document processes.

Connaissances

SIEM expertise

Incident response

Log analysis

Scripting

Formation

Bachelor’s degree in CS/IT/Cybersecurity

Master’s degree or certifications (CISSP/CEH/Security+)

Outils

Microsoft Sentinel

Splunk

IBM QRadar

ArcSight

LogRhythm

AWS/Azure cloud security

Description du poste

Teladoc Health is seeking an experienced SIEM Engineer to join the SOC and design, implement, and manage SIEM systems protecting assets against cyber threats. You will monitor, analyze, and respond to security incidents, optimize SIEM platforms, and work with cross-functional teams to strengthen security posture.

The role emphasizes incident analysis, log ingestion from networks and cloud services, and developing automated detections and response playbooks.