Security Engineer - Logging and Monitoring

Manulife•Boston, MA

1d•Hybrid

About The Position

Join John Hancock’s CyberDefense team to help implement Manulife’s global Logging & Monitoring Standard. You will support centralized event logging to our SIEM, ensure critical applications and security controls produce required log events, and align event data to security use cases. The role focuses on reviewing logging compliance surveys from application teams, assisting with log onboarding, validating event content, and identifying opportunities to automate existing processes. You will partner with Application, Platform, and Asset Owners to onboard and validate log events, enabling effective detection and response and cross-team collaboration.

Requirements

Entry level experience or academic exposure to programming or scripting
Working knowledge of Linux operating systems with comfort using the command line and basic shell scripting
Foundational understanding of log forwarding, collection, and parsing technologies such as rsyslog or nxlog
Familiarity with enterprise logging standards and SIEM onboarding concepts
Couple years coding/programming experience with any language (preferred language is Python) but open to .Net or Java coding experience
Strong collaboration, communication, and documentation skills
Bachelor’s degree in Computer Science or a related field, or equivalent experience

Nice To Haves

Interest or experience in AI or machine learning, particularly applied to automation, analytics, or observability
Exposure to security operations, monitoring, or cyber defense concepts
Curiosity and willingness to learn how security detection and response is enabled through high quality log data

Responsibilities

Support application and platform teams in identifying security relevant events, defining event criticality, and ensuring required event details are captured
Assist with onboarding application and infrastructure logs into the centralized SIEM platform
Guide teams on log configuration requirements aligned with enterprise logging standards and verify successful ingestion, parsing, and data quality
Review logging compliance surveys and partner with application teams to address gaps and support remediation
Collaborate with teams to complete annual logging attestations and compliance activities
Validate that security controls and critical applications produce required log events to support detection and response use cases
Identify opportunities to automate logging, onboarding, validation, and compliance processes to improve efficiency and consistency
Maintain and administer Red Hat Enterprise Linux servers that support centralized logging pipelines
Develop and maintain lightweight scripts to streamline log onboarding, enrichment, validation, and reporting workflows
Partner with CyberDefense, Platform, Application, and Infrastructure teams to strengthen cross team collaboration and observability maturity