Hybrid SIEM Systems Engineer – Assistant Vice President

at MUFG

• Job title: SIEM Systems Engineer – Assistant Vice President
• Job type: Full Time
• Experience level: Lead
• Salary: $113,000 - $150,000 per year
• Degree requirement: Bachelor's Degree
• Tech skills: Ansible, AWS, Azure, Cloud, Cyber Security, Python, Splunk
• Location requirements: Hybrid, Tampa, United States

About the role

• SIEM Systems Engineer designing and implementing security measures at MUFG. Collaborating globally on operational security architectures and standards within the engineering team.

Responsibilities

• Design, implement, and operate enterprise-scale SIEM architectures with a strong emphasis on Cribl Stream / Edge as the primary data pipeline feeding Splunk and other downstream consumers
• Leverage industry trends and market research to adopt the best practices to enhance the SIEM and SOAR platforms.
• Build and manage Security Data Lakes and Warehouses, with a strong preference for AWS-based solutions (e.g., S3, Snowflake, Databricks).
• Define SIEM and SOAR platform standards including data schema, modelling, normalization, monitoring and alerting.
• Develop scalable patterns for integrating on-prem, cloud, SaaS, container, and application data sources into Cribl and SIEM platforms
• Use Regex, Splunk SPL, Kusto Query Language (KQL) and scripting (Python, Ansible) to parse, normalize, enrich, and detect security events.
• Ability to conduct fraud analysis and threat detection.
• Create dashboards, metrics, trends, and executive-level reporting using SIEM & SOAR data.
• Identify opportunities to enhance the current baseline processes and configuration
• Produce engineering, integration and process related documentation.
• Manage vendor relationships to drive roadmap, solution design, implementation and troubleshooting
• Work with key stakeholders of the services to ensure the expectations are meeting the requirements

Requirements

• At least 5+ years of experience in technology with emphasis on cyber security.
• At least 3+ years of experience in SIEM and SOAR products such as Splunk, Elastic, Datadog, Cribl, etc.
• At least 1+ years of experience in Data Lake and data warehouse using products such as AWS S3, Snowflake, Databricks, etc.
• Experience with scripting is highly preferred like Python, Ansible etc.
• Experience in creating trending, metrics, and management reports
• Working knowledge in RegEx, Splunk search language, etc. is required.
• Knowledge and experience operating in a hybrid-cloud environment.
• Knowledge of modern security principles and their practical applications.
• Knowledge and experience in AWS or Azure
• Knowledge and experience with programming language to automate tasks (e.g. Python or PowerShell)

Benefits

• comprehensive health and wellness benefits
• retirement plans
• educational assistance and training programs
• income replacement for qualified employees with disabilities
• paid maternity and parental bonding leave
• paid vacation, sick days, and holidays