Cybersecurity Engineer - SIEM

RESPONSIBILITIES:

• Responsible for the design, build, configuration and maintenance for internal cybersecurity functions including: SIEM, monitoring, technology integrations, infrastructure & configuration as code, and ETL.
• Provide cybersecurity guidance on the strategy, implementation, and maintenance of technologies including but not limited to: SIEM, SOAR, and UBA.
• Utilize SIEM to ingest, enrich, and tune data that will provide value to the Cybersecurity Incident Response team.
• Discover opportunities and implement automation to drive efficiencies across technologies and processes within cybersecurity engineering, incident response, and threat intelligence.
• Collaborate with stakeholders within the cybersecurity team to develop dashboards, reports, alerts, and tools to meet requirements.
• Collaborate with technology teams to ensure systems and services are appropriately configured for monitoring, alerting, and reporting.
• Report, investigate when appropriate, and recommend corrective actions for cybersecurity incidents.
• Advise incident responders on actions necessary to investigate and resolve cybersecurity incidents.
• Remain current on cybersecurity technology, vulnerabilities, attacks, and countermeasures.
• Review performance, availability, and capacity metrics of internally and externally hosted services and service components to compare with service agreements.
• Troubleshoot escalated cybersecurity endpoint, data, and network problems.
• Plan, implement, manage, monitor, and upgrade cybersecurity measures to protect enterprise data and infrastructure.

A LITTLE BIT ABOUT YOU:

• With your problem-solving abilities and strong understanding of cybersecurity, you can help Nielsen stay on the forefront of the evolving cybersecurity threat landscape.
• You are proactive in finding and correcting issues, and in looking for ways to maximize effectiveness of existing technologies.
• It is important to you to stay current on vulnerabilities, exploits, and the expanding cyber-attack surface (cloud services, remote work, IoT, supply chain).
• You approach challenges from new perspectives and develop effective solutions for unique problems.
• You appreciate the importance of operations as an enabler for incremental development and can effectively prioritize and perform work with autonomy.
• You look for opportunities to drive efficiency via automation and collaboration.

QUALIFICATIONS:

• Bachelor’s Degree from an accredited college or university with a major in Computer Information Systems or Cybersecurity related discipline; or 5 years of direct cybersecurity experience.
• Experience with a variety of operating systems including Windows, Linux and UNIX in a functional capacity.
• Experience with SIEM, SOAR, UBA, XDR.
• Knowledge of cloud computing standards and controls (AWS,GCP, Azure).
• Advanced scripting/ automation experience (Python, Shell, Bash, Ansible).
• Experience providing and validating security requirements related to information system design, implementation and business processes.
• Knowledge of common information security standards, such as: ISO, CIS, NIST.
• Ability to work both independently and as part of a team with minimal supervision.
• Ability to communicate technical details in a clear, understandable manner.
• Security certification such as SANS/GIAC, CISSP, CEH, OSCP