SIEM Engineering Operations Lead - Vice President

Deutsche Bank; Jacksonville (FL); Hybrid; USD 100,000 - 157,000; Full time

Benefits offered by this job

Hybrid work model

Generous vacation and personal days

Health and wellbeing benefits

Retirement savings plans

Job summary

Deutsche Bank in Jacksonville, FL is seeking a SIEM Engineering & Operations Lead (Vice President) to own the Bank’s SIEM capabilities, driving end-to-end ownership of security monitoring platforms and transformation initiatives. You will lead cross-functional teams, ensure platform reliability, regulatory compliance, and coordinate with vendors to expand SIEM coverage and AI-enabled monitoring.

The role emphasizes governance, risk management, and strategic delivery, with hybrid work

Qualifications

• Proven experience leading SIEM engineering, operations, or large-scale security monitoring in an enterprise.
• Ability to translate security telemetry into actionable governance and risk outcomes.
• Experience managing budgets, vendor performance, and strategic supplier delivery.

Responsibilities

• Own SIEM platform roadmap execution, service delivery, and operational outcomes across the SIEM estate.
• Lead SIEM Engineering and SIEM Operations teams, including vendors and internal staff.
• Ensure platform availability, resilience, and scalability for security monitoring.
• Drive strategic initiatives, detection engineering expansion, and onboarding of new telemetry sources.
• Manage regulatory, audit, cybersecurity, and operational risk obligations of SIEM capabilities.
• Establish governance, standards, and performance metrics across SIEM functions.

Skills

Leadership

Regulatory risk management

Budgeting & vendor management

Stakeholder communication

Tools

Splunk

Microsoft Sentinel

Job description

Job Title SIEM Engineering & Operations Lead

Corporate Title Vice President

Overview

As SIEM Engineering & Operations Lead, you will establish single point accountability for the Bank’s SIEM capability, ensuring operational resilience, regulatory compliance, and delivery of the strategic transformation roadmap across SIEM Engineering and SIEM Operations. You will provide end-to-end ownership and leadership of the Bank’s security monitoring platforms, bringing engineering and operations together under one accountable leader. This role is critical to maintaining platform stability, compliance, and operational effectiveness while the SIEM estate expands through SIEM coverage growth, threat-driven onboarding, regulatory remediation, and AI enablement across Security Operations.

What We Offer You

• A diverse and inclusive environment that embraces change, innovation, and collaboration


• A hybrid working model, allowing for in-office / work from home flexibility, generous vacation, personal and volunteer days


• Employee Resource Groups support an inclusive workplace for everyone and promote community engagement


• Competitive compensation packages including health and wellbeing benefits, retirement savings plans, parental leave, and family building benefits


• Educational resources, matching gift and volunteer programs

What You’ll Do

• Own SIEM platform roadmap execution, service delivery, and operational outcomes across the SIEM estate


• Lead SIEM Engineering and SIEM Operations teams, including internal colleagues and strategic vendor resources


• Ensure platform availability, resilience, scalability, and operational effectiveness for the Bank’s security monitoring capability


• Drive delivery of strategic initiatives, detection engineering expansion, Application Security Monitoring growth, and onboarding of new log and telemetry sources


• Manage regulatory, audit, cybersecurity, and operational risk obligations associated with SIEM and security monitoring capabilities


• Establish governance, operational standards, and performance metrics across SIEM engineering and operations functions

How You’ll Lead

• Act as the senior stakeholder for SIEM platform engagements with Pillar Architecture, Enterprise Security Architecture, CTO pillars and functions, ISTO, Audit, Risk, regulators, and technology partners


• Set direction and priorities for engineering and operations teams to balance platform resilience, regulatory commitments, and transformation delivery


• Build clear governance, ownership, and escalation paths across internal teams and vendor partners to support stable and compliant SIEM operations

Skills You’ll Need

• Proven experience leading SIEM engineering, SIEM operations, or large-scale security monitoring capabilities in a complex enterprise environment


• Strong understanding of Splunk, Microsoft Sentinel or comparable SIEM platforms, including platform resilience, scalability, onboarding, operational support, and service delivery


• Demonstrated ability to manage audit, regulatory, cybersecurity, and operational risk obligations associated with security monitoring platforms


• Experience leading multidisciplinary teams, including engineering, operations, internal colleagues, and strategic vendor resources


• Experience managing budgets, financial planning, and vendor performance for technology or cybersecurity services, including oversight of strategic supplier delivery and commercial commitments

Skills That Will Help You Excel

• Ability to translate technical platform priorities into clear business, risk, and regulatory outcomes for senior stakeholders


• Strong communication and stakeholder management skills across technology, operations, audit, risk, architecture, and vendor teams


• Structured, outcome-focused leadership style with the ability to drive governance, accountability, and performance across distributed teams


• Familiarity with threat-driven security monitoring, detection engineering practices, cyber resilience expectations, and financial services regulatory requirements


• Relevant cybersecurity, cloud, risk, or technology leadership certifications are beneficial

It is the Bank’s expectation that employees hired into this role will work in the Jacksonville, FL office in accordance with the Bank’s hybrid working model.

Deutsche Bank provides reasonable accommodations to candidates and employees with a substantiated need based on disability and/or religion.

The salary range for this position in Jacksonville is $100,000 to $157,000. Actual salaries may be based on a number of factors including, but not limited to, a candidate’s skill set, experience, education, work location and other qualifications. Posted salary ranges do not include incentive compensation or any other type of remuneration.

At Deutsche Bank, we recognize that our benefit programs have a profound impact on our colleagues. That’s why we are focused on providing benefits and perks that enable our colleagues to live authentically and be their whole selves, at every stage of life. We provide access to physical, emotional, and financial wellness benefits that allow our colleagues to stay financially secure and strike balance between work and home. Click here to learn more!

Learn more about your life at Deutsche Bank through the eyes of our current employees https://careers.db.com/life

The California Consumer Privacy Act outlines how companies can use personal information. If you are interested in receiving a copy of Deutsche Bank’s California Privacy Notice please email [e-mail].