SIEM Engineer

🕒 Outubro 9

🌪️ Kansas, Missouri – Remoto

🌪️ Kansas – Remote 🏰 Missouri – Remote

💵 $107.000 - $128.000 / ano

⏰ Tempo Integral

🟡 Pleno

🟠 Sênior

👷🏻‍♀️ Engenheiro

👻 Score fantasma 0%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

National Association of Insurance Commissioners (NAIC)

SiteLinkedInTodas as Vagas

501 - 1000 funcionários

Fundada em 1871

🛡️ Seguros

🏛️ Governo

🤝 Sem Fins Lucrativos

Insurance • Government • Non-profit

A National Association of Insurance Commissioners (NAIC) é uma organização norte-americana de definição de padrões e suporte para reguladores de seguros estaduais. Ela fornece expertise, dados, leis modelo, orientações regulatórias, plataformas tecnológicas (por exemplo, myNAIC), pesquisa e educação para ajudar os comissários de seguros estaduais a regular seguradoras, proteger consumidores e promover uma administração consistente das leis de seguros. A NAIC publica leis modelo e orientações, gerencia sistemas de arquivamento e dados, coordena o trabalho de comitês em temas como regulação financeira, conduta de mercado, cibersegurança e IA/ML, e oferece recursos aos consumidores e ferramentas de reclamação.

Descrição

• Define, implement, and maintain the organization’s security monitoring and detection capabilities within Google SecOps • Design, implement, and maintain the Google SecOps platform, including log ingestion, parsing, normalization, and enrichment across cloud, on-premises, SaaS, and security data sources • Onboard, validate, and monitor new log sources within Google SecOps • Ensure proper mapping to the Unified Data Model (UDM), telemetry coverage, parser performance, and platform health • Develop Google SecOps dashboards, operational metrics, and reporting for security monitoring, compliance, audit, and executive reporting • Develop and maintain automated investigation and response workflows using Google SecOps • Assist with developing, tuning, and maintaining YARA-L detection content aligned to MITRE ATT&CK techniques • Reduce false positives to improve detection fidelity • Partner with Incident Response and Security Architecture teams to support detection, investigation, and response to cybersecurity threats across the enterprise • Employees are responsible for personal transportation to and from the home and office, including required events, meetings, and training

🎯 Requisitos

• Bachelor’s degree from four-year college or university in a computer related field and 5+ years of experience in information security, with significant focus on security operations, or equivalent combination of education and technical experience • Hands-on experience administering Google SecOps (Chronicle) or an equivalent enterprise SIEM platform • Hands-on experience with cloud security monitoring across AWS, Azure, or Google Cloud Platform • Familiarity with security operations, threat hunting, and detection engineering practices • Strong working knowledge of security telemetry collection, log parsing, and data normalization • Strong working knowledge of threat detection, alert triage, and incident response • Strong working knowledge of MITRE ATT&CK and modern adversary tactics, techniques, and procedures • Ability to communicate complex security concepts clearly to technical and non-technical audiences • Familiarity with developing detection content using YARA-L and Unified Data Model (UDM) and investigating security incidents • Hands-on experience with Endpoint Detection & Response (EDR/XDR) and Threat Intelligence Platforms • Residency within a 100-mile radius of the Kansas City, MO office is required • Applicants must be authorized to work for any employer in the U.S. • Relevant certifications such as CISSP, GCIH, GCIA, and Security+ are preferred • Experience with UDM and custom parser development is preferred • Familiarity with the NIST Cybersecurity Framework is preferred • Experience with Google SecOps SOAR and playbook development is preferred • Experience managing and implementing OpenTelemetry Collectors is preferred • Experience with Windows Event Logging and Sysmon is preferred • Systems and technology experience with Slack, Atlassian Jira, AWS, Microsoft Azure, Windows, Linux, MacOS endpoints, and Microsoft Suite

🏖️ Benefícios

• Full-time remote position • No overnight business travel required • Equal Opportunity Employer

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo