Lead Engineer, IT Security (SIEM/Splunk)
Fwainvest
- # Lead Engineer, IT Security (SIEM/Splunk)Applylocations: Saint Petersburg, Florida - United Statestime type: Full timeposted on: Posted Todayjob requisition id: R-0011814**Job Description Summary**Analyzes and monitors the organization's cyber security measures; responds to actual penetration attempts by malicious hackers.**Job Description***This position follows our hybrid workstyle policy: Expected to be in a Raymond James office location a minimum of 12 days a month.**Please note: This role is not eligible for Work Visa sponsorship, either currently or in the future.*The financial services industry is constantly under attack by sophisticated cyber adversaries that range from nation states to criminals. In response, the Raymond James Cyber Threat Center (CTC) is charged with ensuring all equities are secure against all tiers of adversaries. We are the central hub for Computer Network Operations and are on the front lines of security incident response, threat hunting, and intelligence. You'll be working with emerging technologies to solve challenging security problems in a fast-paced and continuously evolving environment, while helping steer the direction and evolution of the team. This highly visible team within the organization evaluates threats to the environment and dynamically adjusts to the ever-changing threat landscape by applying practical security knowledge to developing new detective measures to protect the firm.The CTC Lead Engineer, IT Security, is a primary member of the CTC and serves as a Splunk subject matter expert responsible for the design, development, creation, and maintenance of advanced Splunk content in support of Incident Response, HUNT, Cyber Threat Intelligence, and Cyber Crime operations. This role provides technical leadership for Splunk engineering, administration, optimization, automation, and AI-enabled security analytics across the enterprise.The Lead Engineer is also part of the Raymond James Splunk administration team and is responsible for the operation and maintenance of the Raymond James Splunk Cloud environment, including search heads, indexers, heavy and universal forwarders, and the enterprise Syslog-NG environment. The role partners closely with security operations, threat detection, incident response, infrastructure, cloud, and application teams to ensure reliable log ingestion, scalable platform performance, actionable detections, and continuous improvement through automation, analytics, and AI-assisted capabilities.Responsibilities:* Lead the architecture, engineering, administration, and ongoing optimization of Splunk Cloud across a large-scale, distributed, hybrid, environment* Responsible for Splunk Cloud platform health, including indexer/search head clustering, deployment servers, forwarder management, storage optimization, license utilization, retention policies, performance tuning, and system availability* Develop, tune, and maintain Splunk content, including dashboards, reports, alerts, correlation searches, data models, field extractions, props/transforms, lookups, macros, and CIM-aligned knowledge objects* Lead automation initiatives across Splunk and security operations, including automated log onboarding, health checks, evidence collection, and ticket creation* Work with SOAR platforms, scripting, APIs, CI/CD pipelines, and infrastructure-as-code practices to automate repeatable Splunk administration, content management, and operational workflows* Troubleshoot complex Splunk issues related to ingestion, parsing, indexing, searching, acceleration, dashboards, apps/add-ons, authentication, integrations, storage, and platform performance* Lead administration and operational support for the global Syslog-NG environment* Strong troubleshooting skills across Linux, Windows, networking, storage, authentication, distributed systems, and cloud environments.* Shares in a weekly on-call rotation and acts as an escalation point for major incidents and associates of Raymond James.Experience and Skills:* B.S. in Computer Science, Computer Engineering, or related degree and a minimum of five (5) years of related experience in Splunk engineering, administration, and content development* System administrator experience in Linux, Windows, or OSX operating systems* System administrator experience in maintenance and management of enterprise syslog environment* Knowledge of networking and the common network protocols* Experience with development of complex Splunk analytics* Familiar with interacting with a variety of APIs and using an API platform such as Postman, Insomnia, or Hopscotch to develop and test data integrations* Demonstrated ability to create complex scripts, develop tools, or automate processes in PowerShell, Python or Bash.* One or more of the following certifications or the ability to obtain within 1 year: + Splunk Cloud Certified Admin + Splunk Certified Architect + Splunk Certified Consultant + CISSP: Certified Information Systems Security Professional + CCNA: Cisco Certified Network AssociateCompetencies:* Analysis: Identify and understand issues, problems and opportunities; compare data from different sources to draw conclusions.* Communication: Clearly convey information and ideas through a variety of media to individuals or groups in a manner that engages the audience and helps them understand and retain the message.* Exercising Judgment and Decision Making: Use effective approaches for choosing a course of action or developing appropriate solutions; recommend or take action that are consistent with available facts, constraints, and probable consequences.* Technical and Professional Knowledge: Demonstrate a satisfactory level of technical and professional skill, or knowledge, in position-related areas; remain current with developments and trends in areas of expertise.* Building Effective Relationships: Develop and use collaborative relationships to facilitate the accomplishment of work goals.* Client Focus: Make internal and external clients, and their needs, a primary focus of actions; develop and sustain productive client relationships.**Education**Bachelor’s, High School (HS) (Required)**Work Experience**General Experience - 3 to 6 years**Certifications****Travel**Less than 25%**Workstyle**HybridThe total compensation for this position includes base salary or wages, and may include components such as additional compensation (cash or equity), discretionary bonuses, or commissions. This position is eligible for a benefits package that may include medical, dental, and vision; life insurance; critical illness insurance and accident insurance; disability benefits; retirement savings; paid time off (including vacation, holidays, and sick leave); and parental leave. Eligibility for benefits and specific offerings may vary based on position and employment status. To view more details of the benefits offered, visit Myrjbenefits.com.At Raymond James our associates use five guiding behaviors (Develop, Collaborate, Decide, Deliver, Improve) to deliver on the firm's core values of client-first, integrity, independence and a conservative, long-term view. We expect our associates at all levels to: • Grow professionally and inspire others to do the same • Work with and through others to achieve desired outcomes • Make prompt, pragmatic choices and act with the client in mind • Take ownership and hold themselves and others accountable for delivering results that matter • Contribute to the continuous evolution of the firmAt Raymond James – as part of our people-first culture, we honor, value, and respect the uniqueness, experiences, and backgrounds of all of our Associates. When associates bring their best authentic selves, our organization, clients, and communities thrive. The Company is an equal opportunity employer and makes all employment decisions on the basis of merit and business needs.
- J-18808-Ljbffr Fwainvest
Vacancy posted 3 days ago
Similar jobs that could be interesting for youBased on the Lead Engineer, IT Security (SIEM/Splunk) in Florida, NY vacancy
- ...are looking for a seasoned Lead Engineer, Cyber Security Counter Threat Management with... ...with security tooling (SIEM, EDR, SOAR, firewalls, identity... ...platforms such as CrowdStrike, Splunk, ServiceNow, and cloud... ...security operations environment It is the policy of the Company...Splunk
- ...guests. The Global Information Security Team has an exciting opportunity for a Lead Security Automation Engineer, AI & Cybersecurity . This... ...with key security tools such as SIEM, EDR, SOAR, firewalls,... ...platforms such as CrowdStrike, Splunk, ServiceNow , cloud security...Splunk
- Royal Caribbean Group is seeking a Lead Engineer in Cyber Security Counter Threat Management to architect and operate AI-driven automation that strengthens... ...work. You will lead integrations with CrowdStrike, Splunk, ServiceNow, and cloud security services, guiding SOC...Splunk
- ...and deploy cybersecurity technology solutions in alignment with approved architecture standards and enterprise security strategies. Partner with PMO and IT teams to ensure cybersecurity requirements and reference architecture standards are integrated throughout the full...SuggestedTemporary work
- Nucleus Security is seeking a Senior Software Engineer for the Platform with a passion for security analytics and scalable data platforms. You will own data-driven features end-to-end, from prototyping to production delivery, and help evolve the platform for scalable ingestion...SuggestedRemote job
- ...Cardone Training Technologies seeks a Systems Engineer to own, plan, and engineer the... ...keeps our business running. You will manage security, monitoring, and design of our hardware and... ...hands-on, high-impact role requires strong IT fundamentals, practical experience with...
- ...Training Technologies, Inc. is seeking a Systems Engineer to support, plan, and engineer our infrastructure. You will own security, monitoring, implementation, and design of... ...virtualization, and networked hardware, and lead deployments while maintaining thorough documentation...
- Jobtailor is seeking a Tier 2 Security Support Analyst to support the Florida Scholars Academy... ..., and coordinate with incident response leads to determine root causes, while maintaining... ...an Associate degree in CS or IS, relevant IT/cybersecurity certifications, and 4+ years...
$116.8k - $146k
...Softchoice We are a software-focused IT solutions and services... ...valuable. As a Senior Microsoft Security Consultant within the... ...This role is responsible for leading the service delivery functions... ...mentor and develop Consultants, Engineers and Technicians on the team, and...Full timeContract workWork experience placementRemote workFlexible hours$85k - $90k
Career Opportunities withJANUS Research Group Senior Cyber Capability Development Analyst Candidates must have an active Top Secret clearance and verify, before applying, that you meet the minimum requirements of the position. Target salary range: $85k - $90k . The estimate...Civilian ContractorFor contractorsFor subcontractor- ...Must Have: (DODTOP) Department of Defense TOP SECRET SECURITY CLEARANCE Value-Add Skills Experience with Splunk ES (Enterprise Security) and ITSI (IT Service Intelligence) . Background in security operations or SIEM environments . Excellent documentation , leadership...SplunkContract workLocal area
- Raymond James Financial, Inc. in Saint Petersburg, FL, seeks an Advisor for Securities Based Lines of Credit (SBL) to support Financial Advisors, IBCs, and branch teams. Under supervision, you’ll advise on loan structures, collateral, documentation, and client eligibility...
- Hialeahfl is seeking an IT Security Analyst to oversee daily security operations in Florida. This role includes monitoring security controls, conducting vulnerability assessments, and implementing security measures across the City’s enterprise. The ideal candidate should...
- CACI International Inc is seeking a Cyber Advisor for the SOUTHCOM Joint CCMD Cyber Assistance Team in Florida. This role will involve supporting various cyber strategy initiatives and conducting missions aimed at enhancing cyber defense capabilities for partner nations...Work at office
- ...Tier 2 or 3 to support overnight security and network operations... ...visibility and continuity. Work with SIEM platforms, EDR/XDR tools,... ...candidate has previous experience in IT support, NOC operations,... ...Microsoft 365, Microsoft Sentinel, Splunk, SentinelOne, CrowdStrike,...SplunkRemote jobFlexible hoursShift workNight shiftAfternoon shift3 days per week
- Hard Rock International is seeking a Cyber Risk Assessor III to lead cybersecurity risk assessments and develop governance documentation. This strategic role involves evaluating risks and control effectiveness across the organization. The ideal candidate should have 7+...
- ...complex incidents — leading investigation, driving... ...close the gaps. Ensure SIEM and detection quality... ...with detection engineering to address it. Contribute to response... ...You Bring 5+ years in security operations, incident... ...Sentinel, and/or Splunk a plus) — enough to understand...SplunkWork experience placement
$182.71k - $274.07k
Citrix is seeking a Principal Security Technology Strategist to enhance cybersecurity solutions across North America. This role involves... ...cybersecurity, strong communication skills, and the ability to lead technical presentations. Remote work is available, with a salary...Remote work- ...services company is searching for a Workday Security Analyst III in the Town of Florida, New York. This mid-senior level role entails leading security processes and enhancing Workday's... ...cybersecurity teams to respond to security events. #J-18808-Ljbffr Gravity IT Resources
$138.2k - $224.6k
GuideWell Mutual Holding Corporation is seeking a Principal Cloud and AI Security Architect to drive enterprise security strategy. The ideal candidate will have extensive experience leading secure cloud migrations and architecture design in AI technologies. This role emphasizes...Remote job$138.2k - $172.8k
Principal Cloud and AI Security Architect United States and 1 more (Remote... ...implementation of innovative, leading-edge security technology... ...gaps between data scientists, engineers, AI Architects, Cloud Architects... ...on progressively complex IT and Cybersecurity projects Related...Full timeTemporary workPart timeWork experience placementInternshipSeasonal workRemote workShift work$99k - $225k
...protects the nation. As an information security risk spe cia list on our team, you’ll use... ...policies , and managing security tools such as SIEMs, vulnerability scanners, and identity... ...Experience using security tools such as Splunk, Micro sof t Defender, AWS Security Hub,...SplunkFull timeContract workPart timeWork at officeLocal areaRemote work- SpaceX is seeking a Sr. Cyber Assurance Analyst to lead security audits and conduct technical assessments in New York. The ideal candidate... ...frameworks. Responsibilities include partnering with engineers, conducting risk assessments, and mentoring team members. This...
- ...Grow. with KBR!***KBR’s National Security Solutions team provides high-end engineering and advanced technology solutions... ...science, program management, mission IT and cybersecurity solutions.* **... ...(RMF) accredited environment SIEM (Splunk, SolarWinds, etc.) Coordination,...SplunkWork at office
- Chief Information Security Officer page is loaded## Chief Information Security... ..., and remediation efforts* Lead compliance initiatives, such as... ...(IAM, endpoint security, SIEM/MDR, email security, cloud security... ...* Partner closely with IT and operations teams to embed security...Temporary workWork experience placement
- Royal Caribbean Group in Miramar, Florida seeks a Lead Security Automation Engineer, AI & Cybersecurity to design AI-driven security workflows, automate... ...engineering teams, build AI agents, integrate with SIEM/EDR/SOAR, and mentor junior engineers in a fast-paced setting...
$118.02k - $180.31k
...meet the electric demands. This is expanding work in the Mechanical Analysis Engineering group. You will work on major systems, equipment and plant process in the following areas: Develop and lead licensing basis system and component evaluations for nuclear power uprate...Hourly payLocal areaWorldwideFlexible hours3 days per week- TekSynap is seeking a Wireless Network Operations Center Lead to support a national law enforcement agency's NOC. This role requires over ten years of experience in tactical communications integration and leadership. The successful candidate will coordinate scheduling...Night shift
- ...resolution Apply best practices for mobile security, performance, and maintainability... ...experience Experience 3-5 years of software engineering experience 3+ years of Android... ...Familiarity with Azure DevOps, Dynatrace, Splunk is a plus Travel or airline industry experience...SplunkWork at officeLocal area
- ...environments while ensuring high availability, security, and performance. This role requires... ...initiatives. Mentor junior engineers and establish middleware administration... ...IBM MQ Administration Kafka Messaging Splunk Monitoring XML/SOAP Web Services Infrastructure...SplunkContract work
Do you want to receive more vacancies?
Subscribe and receive similar vacancies to Lead Engineer, IT Security (SIEM/Splunk). Be the first to apply!
