Job Description

Key Responsibilities

Senior Cybersecurity / SIEM-SOAR Production Support role with a strong Splunk and IAM focus.
Responsible for keeping security platforms running, troubleshooting production issues, detecting threats, and automating security response.
Strong L2/L3 production support in a regulated financial-services environment.

Day-to-Day

Manage and optimize Splunk/SIEM/SOAR.
Build Splunk queries, alerts, dashboards, detection rules, and SOAR playbooks.
Monitor security events and troubleshoot production issues.
Support IAM, MFA, authentication, and access management.
Perform incident management, RCA, and service restoration.
Work with Linux/Windows, SQL/Oracle, Ansible, Jenkins, OpenShift, Remedy, Dynatrace.
On-call/off-hours support and 3 days onsite.

Must-Haves

5+ years SIEM/SOAR and production support
Strong hands-on Splunk
Strong IAM/MFA/access management
Expert Linux, strong Windows
SQL/Oracle
Scripting: Unix/PowerShell
Incident management, troubleshooting, and ITIL
Strong communication and problem-solving

Plusses

CISSP or cybersecurity certification
Financial services/FinTech experience
Cloud, DevOps/CI/CD, and networking experience
Ansible, Jenkins, OpenShift, GitHub, Dynatrace
Tower / BladeLogic

Skills: splunk,ansible,soar,dynatrace,jenkins,iam,siem

??? people applied to this job

Report Job

See our resume templates side by side, from plain one-column pages hiring software reads in order to designed pages to hand to a person. See the templates →