Senior Cyber Security Engineer - SIEM and Automation

About The Role We are seeking a highly skilled Senior Cyber Security Engineer – SIEM and Automation to lead and enhance our detection engineering capabilities. This role is responsible for developing high‑fidelity use cases, optimizing logging strategies, integrating security tools, and tuning alerts to improve signal‑to‑noise ratio. You will work closely with Security Operations, Threat Intelligence, and Engineering teams to ensure our SIEM platform delivers actionable insights and supports rapid incident detection and response. Responsibilities Use Case Development – Design, develop, and maintain SIEM detection use cases aligned with MITRE ATT&CK and threat intelligence. Translate threat scenarios into actionable detection logic and correlation rules. Continuously improve detection coverage through gap analysis and adversary simulation insights. Logging & Data Analysis – Define and implement logging requirements across cloud, endpoint, network, and application layers. Analyze log sources to ensure data quality, normalization, and completeness. Identify gaps in telemetry and recommend improvements. Tool Integration & Data Onboarding – Integrate new data sources into the SIEM (e.g., EDR, IAM, firewall, SaaS platforms). Work with engineering teams to onboard logs using APIs, agents, and pipelines. Ensure proper parsing, enrichment, and normalization. Alert Tuning & Optimization – Reduce false positives through continuous alert tuning and threshold optimization. Implement risk‑based alerting and prioritization strategies. Collaborate with SOC analysts to refine detection logic based on incident feedback. SIEM Platform Engineering – Maintain and optimize SIEM performance, scalability, and cost efficiency. Develop dashboards, reports, and visualizations for operational and leadership insights. Support automation and orchestration with SOAR integrations. Collaboration & Continuous Improvement – Partner with Threat Intelligence to operationalize indicators and emerging threats. Support incident response investigations with log analysis and detection enhancements. Stay current with evolving attack techniques. Skills and Qualifications Technical Requirements – Bachelor’s degree in Cybersecurity, Computer Science, or related field (or equivalent experience). 3–7+ years in SIEM engineering, detection engineering, or security operations. Hands‑on SIEM platforms (Splunk, Microsoft Sentinel, QRadar, Elastic). Strong understanding of Windows, Linux, cloud, and network logs. Query languages (SPL, KQL, Lucene, SQL). Knowledge of MITRE ATT&CK framework. Experience onboarding and parsing diverse data sources. Preferred Qualifications – Experience with SOAR platforms and automation. Familiarity with AWS, Azure, GCP native logging. Scripting or programming skills (Python, PowerShell). Detection‑as‑code and version control practices. Security certifications such as GCIA, GCIH, CISSP, Splunk Certified, Microsoft SC‑200. Skills & Competencies – Strong analytical and problem‑solving skills. Ability to balance detection fidelity with operational efficiency. Effective communication and collaboration across technical teams. Continuous learning mindset with threat‑driven defense focus. Compensation The anticipated salary range is $168,000 to $195,000 for candidates in Jersey City, NJ and Woodland Hills, CA, with variability based on location, skills, and experience. The position is eligible for a discretionary bonus and offers a comprehensive benefits package. Work Location This role is based in one of the following locations: Corebridge Financial’s Woodland Hills, CA; Jersey City, NJ; or Houston, TX. It follows a hybrid working policy and requires up to 25% travel. Benefit Offerings Medical, dental, and vision insurance; mental health support and wellness initiatives. Retirement savings including a 401(k) plan with company match up to 6% of eligible pay and an additional 3% match. Employee Assistance Program providing confidential counseling services. Matching charitable donations 1:1 up to $5,000. Volunteer time off: Up to 16 hours annually. Paid Time Off: Minimum 24 days for eligible employees. We are an Equal Opportunity Employer. Corebridge Financial is committed to fairness and does not discriminate on the basis of race, color, religion, sex, gender, gender identity, sexual orientation, national origin, disability, neurodivergence, age, veteran status, citizenship, or immigration status. We are committed to reasonable accommodations for applicants and employees with disabilities and sincerely held religious beliefs. #J-18808-Ljbffr