Chief Security Software Engineer (SIEM) Remote

Responsibilities

• Lead the engineering, implementation, and setup of SIEM systems, ensuring they integrate flawlessly with diverse security tools, systems, and log sources
• Coordinate and manage SIEM migration projects, including data migration, log source integration, rule/alert transitions, and system adjustments
• Craft, personalize, and refine SIEM scenarios, correlation rules, dashboards, and reports for effective threat and suspicious activity identification
• Enfold various log sources such as firewalls, IDS/IPS, antivirus, cloud services, applications, and operating systems within the SIEM framework
• Work alongside the SOC team to aid in the development and improvement of additional use cases in alignment with SOC specifications
• Periodically assess and enhance SIEM performance to maintain effective log collection, storage, processing, and alert generation
• Document all SIEM configurations, integrations, and migration steps comprehensively, and regularly report on SIEM system performance
• Educate and guide junior security engineers and SOC analysts on optimal SIEM usage, best practices, and problem-solving techniques
• Collaborate with IT, security, and network departments to guarantee the SIEM platform is cohesive with overarching security objectives and strategies

Requirements

• Minimum of 7 years in Cyber Security, with a significant focus on engineering SIEM solutions and working within a SOC
• Expertise in SIEM engineering and architecture, specifically with Splunk or other major SIEM technologies like Microsoft Sentinel, QRadar, ArcSight, LogRythm
• Experience overseeing the entire delivery lifecycle for SIEM enhancements and automation, including work with integrated SIEM solutions featuring SOAR and XDR components
• Proficiency in log source integration and developing correlation rules, alerts, and dashboards
• Background in cloud environments (AWS, Azure, GCP) and the integration of cloud logs into SIEM systems
• Understanding of security frameworks (MITRE ATT&CK, NIST) and basic regulatory compliance knowledge (GDPR, PCI-DSS)
• Knowledge of network protocols, firewalls, IDS/IPS, endpoint security, and threat intelligence
• Capability to grasp client-specific security challenges, needs, and the regulatory landscape to devise appropriate solutions
• Skilled in communicating complex technical concepts to clients, fostering trust and strong relationships
• Ability to handle stakeholders at various tiers, from technical teams to senior executives
• Collaborate effectively across different organizational departments and with large enterprises
• Lead discussions, mediate disputes, and achieve consensus among diverse stakeholder groups
• Make strategic decisions based on thorough analysis and evidence

We offer

• Career plan and real growth opportunities
• Unlimited access to LinkedIn learning solutions
• International Mobility Plan within 25 countries
• Constant training, mentoring, online corporate courses, eLearning and more
• English classes with a certified teacher
• Support for employee’s initiatives (Algorithms club, toastmasters, agile club and more)
• Enjoyable working environment (Gaming room, napping area, amenities, events, sport teams and more)
• Flexible work schedule and dress code
• Collaborate in a multicultural environment and share best practices from around the globe
• Hired directly by EPAM & 100% under payroll
• Law benefits (IMSS, INFONAVIT, 25% vacation bonus)
• Major medical expenses insurance: Life, Major medical expenses with dental & visual coverage (for the employee and direct family members)
• 13 % employee savings fund, capped to the law limit
• Grocery coupons
• 30 days December bonus
• Employee Stock Purchase Plan
• 12 vacations days plus 4 floating days
• Official Mexican holidays, plus 5 extra holidays (Maundry Thursday and Friday, November 2nd, December 24th & 31st)
• Monthly non-taxable amount for the electricity and internet bills