Cybersecurity Ops Technologist - Splunk SIEM Engineer

Travelers•Hartford, CT

11d

About The Position

As a Cybersecurity Ops Technologist I - Splunk SIEM Engineer, You will continuously manage and monitor SIEM platform health, data ingestion pipelines, and detection coverage gaps, applying critical thinking and structured problem-solving to investigate anomalies, resolve engineering issues, and drive improvements across the detection ecosystem. You will collaborate closely with SOC analysts and threat detection engineers to translate operational needs into scalable, high-fidelity detection solutions that enhance the team's ability to identify and respond to threats with speed and confidence.

Requirements

Degree or Certificate in Cybersecurity, Computer Science or related field.
5 years of experience in Cybersecurity with experience operating in security operations, working with log aggregation platforms and cloud automation.
Extensive experience using and managing SIEM platforms or data pipelining tools.
Strong critical thinking skills with the ability to approach problems creatively, reverse-engineer complex challenges, and develop effective solutions.
Proficient in Linux and Windows command-line environments and scripting languages.
Familiar with security operations center (SOC) workflows and processes, enabling effective cross-functional collaboration and support across security and engineering teams.
Technical knowledge of computer networking concepts and protocols, network security methodologies, cyber threats and vulnerabilities, authentication, authorization, and access control methods.
Ability to effectively communicate meaningful insights regarding the organization’s threat environment in order to improve its risk management posture.
Experience Administrating Splunk
Experience Administrating SIEM
Experience w/ Python
Experience w/ AWS Cloud Services
Bachelor’s degree or its equivalent in work experience.
2 years of experience working in a Technology related field or role.

Responsibilities

Continuously manage and monitor SIEM platform health, data ingestion pipelines, and detection coverage gaps.
Apply critical thinking and structured problem-solving to investigate anomalies and resolve engineering issues.
Drive improvements across the detection ecosystem.
Collaborate closely with SOC analysts and threat detection engineers to translate operational needs into scalable, high-fidelity detection solutions.
Enhance the team's ability to identify and respond to threats with speed and confidence.
Tackle complex engineering and analytical activities that directly support the timely detection, identification, alerting, and response capabilities of the SOC and Threat Detection teams.
Analyze identified malicious activity to determine weaknesses exploited, exploitation methods, effects on system and information.
Conduct research, analysis, and correlation across a wide variety of all source data sets broadly and create alerts and controls, as appropriate.
Build tools and processes following CI/CD best practices to drive efficiency and support systems and team members across our line of business.
Lead efforts to monitor health and optimize systems/components necessary for security operations to function.
Provide Product and/or System ownership encompassing full responsibility for the ongoing production availability and effectiveness of Cybersecurity controls.