Security Engineer (Remote)

Job description

Job Description
Reporting to the Manager of Threat Detection Engineering the Security Engineer will work with our teams including cyber threat intelligence analysts SOC analysts threat detection engineers server and network administrators security tool administrators and department customers. You will have information security experience in incident response and understanding of security log feeds mapping the data into the SIEM.
You will:
Understand data feeds of multiple security tools and logs that feed the SIEM & UEBA technologies. Identify capabilities and quality of these feeds and recommend improvements
Create new content use cases based on threat intelligence analyst feedback available log data and previous incidents
Perform daily activities of the content life cycle including creating new use cases testing content; tuning and removing content; and maintain associated documentation
Improve vulnerabilities in the different application environments
Work with the other security teams and product SMEs to identify gaps within the existing capability
Develop parsers/field extractions to facilitate reliable content development
Develop custom scripts to enhance default SIEM functionality
Participate in root cause analysis on security incidents and provide recommendations for new data sources and enrichment
Qualifications
Qualifications:

• 5 years experience in security engineering or site reliability engineering
• Excellent Terraform skills required and experience with Cloud Migration
• Experience working with and developing CI/CD pipelines for Infrastructure as Code required
• Knowledge of programming/scripting fundamentals (python/golang) required
• Expertise in performing ETL onboarding for diverse log feed technologies required
• Experience supporting a Splunk platform administration new content dashboards applications and use cases
• Hands-on experience developing Rest APIs to capture data from external sources
• Experience with Agile methodologies
• Understanding of multiple log formats and source data for SIEM Analysis
• Solid background with Windows and Linux platforms (security or system administration)

Qualifications :
Qualifications

• 5 years experience in security engineering or site reliability engineering
• Excellent Terraform skills required and experience with Cloud Migration
• Experience working with and developing CI/CD pipelines for Infrastructure as Code required
• Knowledge of programming/scripting fundamentals (python/golang) required
• Experience supporting a SIEM platform administration new content dashboards applications and use cases
• Understanding of multiple log formats and source data for SIEM Analysis

Additional Information :
Our uniqueness is that we celebrate yours. Experians culture and people are important differentiators. We take our people agenda very seriously and focus on what matters; DEI work/life balance development authenticity collaboration wellness reward & recognition volunteering... the list goes on. Experians people first approach is award-winning; Worlds Best Workplaces 2024 (Fortune Top 25) Great Place To Work in 24 countries and Glassdoor Best Places to Work 2024 to name a few. Check out Experian Life on social or our Careers Site to understand why.
Experian is proud to be an Equal Opportunity and Affirmative Action employer. Innovation is an important part of Experians DNA and practices and our diverse workforce drives our success. Everyone can succeed at Experian and bring their whole self to work irrespective of their gender ethnicity religion colour sexuality physical ability or age. If you have a disability or special need that requires accommodation please let us know at the earliest opportunity.
Experian Careers - Creating a better tomorrow together
Find out what its like to work for Experian by clicking here
Remote Work :
No
Employment Type :
Full-time