SIEM Engineer

Position: SIEM Engineer
Location: Remote
Duration: 6+ Months; Strong potential for extension into 2025

Position Description:
Our client in the financial services domain is seeking a candidate to help grow and improve the Cyber Development and Testing team. The team handles the end-to-end process of the development of new security use cases. This function touches many different teams and requires both a wide and deep understanding of several different information security concepts and how they function and apply to a corporate enterprise environment. The candidate should have an established background in information security and should have experience with both the development and testing of security cases that serves a large organization.

The candidate will be assisting the US Cyber Threat Detection Lead in the organization's migration to cloud. This entails the testing of existing use cases, testing of new use cases, development of new use cases in the new Cloud SIEM tenant, facilitating requests between entities, and generally being available to assist with any activities related to Threat Detection.

Required Skills :
- 3-4 years of experience
- Security log analysis
- Analysis of use case requirements
- Creating efficient and performant correlation search queries which will become security use cases, reports, or dashboards
- Recognizing and identifying patterns in data that will drive decision-making
- Designing, implementing, and executing testing procedures for new and existing security alerts
- Communicating effectively across several different teams and entities
- Effective communication as to the status of weekly, monthly, and quarterly project deadlines and deliverables
- Effective, precise, and detailed documentation in regards to the development and testing of security use cases

Ideal candidate will have:
- Splunk (developer-level)
- AWS (intermediate). Familiarity with AWS CloudTrail and GuardDuty is a huge plus
- JIRA (or any agile based platform)

Required Skills : - Familiarity with AWS CloudTrail and GuardDuty - Splunk (developer-level) - AWS (intermediate). - JIRA (or any agile based platform)
Background Check :Yes
Drug Screen :Yes
Notes :
Selling points for candidate :
Project Verification Info :"The information provided below is for Apex Systems AV use only and is not to be distributed publicly, or to any third party. Any distribution of the below information will result in corrective action from Apex Systems Vendor Management. MSA: Blanket Approval Received Client Letter: Will Not Provide"
Candidate must be your W2 Employee :Yes
Exclusive to Apex :No
Face to face interview required :No
Candidate must be local :No
Candidate must be authorized to work without sponsorship ::No
Interview times set : :No
Type of project :0007389 | Santander Bank, NA (SBNA)
Master Job Title :
Branch Code :