Senior Cybersecurity - SIEM

AT&T•Charlotte, NC

11d•Onsite

About The Position

This position requires office presence of a minimum of 5 days per week and is only located in the location(s) posted. No relocation is offered. Join AT&T and reimagine the communications and technologies that connect the world. Our Chief Security Office ensures that our assets are safeguarded through truthful transparency, enforce accountability and master cybersecurity to stay ahead of threats. Bring your bold ideas and fearless risk-taking to redefine connectivity and transform how the world shares stories and experiences that matter. When you step into a career with AT&T, you won’t just imagine the future-you’ll create it. The Senior Cybersecurity position requires solid technical knowledge in cyber operations, SIEM work experience, detection engineering, algorithm development and a strong interest in growing expertise. Works independently on assigned tasks and collaborates closely with Leads and analysts to review and document feeds, research threat scenarios, and develop scripts, dashboards, and reports to detect and analyze threats against the Enterprise. This role supports SaaS, Network Infrastructure Security, on-prem and cloud-based security.

Requirements

Experience in Data Analysis, applied Machine Learning, AI, and Detection Engineering.
Proficiency in Python, SQL, Splunk, and Kusto (or similar query languages).
Ability to learn new technologies and concepts quickly; self-motivated and resourceful.
Programming skills in Python, and Java.
Knowledge of database systems; experience with CRIBL, Palo Alto XSIAM desired.
Splunk, Apache Spark/Databricks.
Strong communication and documentation skills.
Background in Computer Science, Data Science, or Engineering with cybersecurity familiarity.
3+ years professional experience.

Responsibilities

Review Front Door and Jira documentation submitted to and created by team 10%
Analyze data feeds and provide feedback to the data ingest team regarding feed readiness. Document and capture feed information as part of feed onboarding process 10%
Working with analysts (and other SMEs) as well as Focus Area Leads based on Work Plan, research threat scenarios determine data sets required, develop algorithms for threat detection. 50%
Testing and onboarding alarms via team’s processes. This includes micro-playbook development and other SOAR related activities. 20%
Grow knowledge of Cybersecurity. Team processes, and Systems. 10%

Benefits

Medical/Dental/Vision coverage
401(k) plan
Tuition reimbursement program
Paid Time Off and Holidays (based on date of hire, at least 23 days of vacation each year and 9 company-designated holidays)
Paid Parental Leave
Paid Caregiver Leave
Additional sick leave beyond what state and local law require may be available but is unprotected
Adoption Reimbursement
Disability Benefits (short term and long term)
Life and Accidental Death Insurance
Supplemental benefit programs: critical illness/accident hospital indemnity/group legal
Employee Assistance Programs (EAP)
Extensive employee wellness programs
Employee discounts up to 50% off on eligible AT&T mobility plans and accessories, AT&T internet (and fiber where available) and AT&T phone.