Splunk SIEM Engineer — Cybersecurity Detection Expert

Travelers Insurance; Hartford (CT); On-site; USD 99,000 - 163,000; Full time

Benefits offered by this job

Health insurance

401(k) match programs

Paid time off

Wellness program

Volunteer encouragement

Job summary

Travelers Insurance is seeking a Cybersecurity Ops Technologist I to monitor and optimize the SIEM ecosystem, investigate anomalies, and drive improvements with the SOC and threat teams. You will translate operational needs into scalable detection solutions.

The role emphasizes hands-on SIEM management, data ingestion health, and cross-functional collaboration with threat detection engineers to enhance threat response speed and accuracy.

Qualifications

• Bachelor’s degree or equivalent; 2 years in a tech-related field.
• 5 years of cybersecurity experience; security operations and log pipelines.
• Experience with SIEM platforms and data pipelines.
• Proficient in Linux/Windows CLI and scripting.
• Experience administering Splunk and SIEM; Python and AWS.

Responsibilities

• Tackle complex engineering and analytical activities supporting detection, alerting, and response by SOC and Threat Detection.
• Analyze malicious activity to determine weaknesses and exploitation methods.
• Conduct research and correlation across data sets to create alerts and controls.
• Build tools and processes following CI/CD best practices to improve efficiency.
• Lead efforts to monitor health and optimize security systems/components.
• Provide ownership for ongoing production availability of cybersecurity controls.

Skills

SIEM platforms

Threat detection

Python

AWS Cloud Services

Linux/Windows CLI

Network security

Cross-functional collaboration

Education

Bachelor’s degree or equivalent

Tools

Splunk

SIEM

Job description

Travelers Insurance is seeking a Cybersecurity Ops Technologist I to monitor and optimize the SIEM ecosystem, investigate anomalies, and drive improvements with the SOC and threat teams. You will translate operational needs into scalable detection solutions.

The role emphasizes hands-on SIEM management, data ingestion health, and cross-functional collaboration with threat detection engineers to enhance threat response speed and accuracy.