Cyber Engineer Architect - SIEM Security Architect

<h3>Accountabilities:</h3><li>
<strong>Cybersecurity Architecture and Deployment:</strong>Design, architect, deploy, and maintain advanced cybersecurity solutions, including SIEM platforms, intrusion detection and prevention systems (IDS/IPS), web content filtering, network forensics, and firewall management.</li><li>
<strong>Splunk Platform Engineering:</strong>Architect and implement distributed Splunk environments, optimizing log ingestion, data processing, security monitoring, scalability, and operational performance.</li><li>
<strong>Security Automation and Orchestration:</strong>Lead the integration of Splunk SOAR with SIEM platforms, Palo Alto security solutions, endpoint detection and response tools such as CrowdStrike, and ticketing systems such as ServiceNow.</li><li>
<strong>Network Visibility and Traffic Analysis:</strong>Integrate Gigamon and ExtraHop visibility solutions to support deep packet inspection, network flow mapping, enhanced threat investigation, and security toolchain optimization.</li><li>
<strong>Security Information Management:</strong>Develop and enhance enterprise log management capabilities, ensuring effective collection, correlation, analysis, and monitoring of security events across distributed infrastructure.</li><li>
<strong>Security Controls and Compliance:</strong>Collaborate with cross-functional teams to design, implement, and enforce security controls aligned with NIST, FedRAMP, and applicable enterprise log management standards.</li><li>
<strong>Infrastructure Troubleshooting:</strong>Diagnose and resolve complex cybersecurity and infrastructure issues, provide escalation support, and help restore system functionality while minimizing operational disruption.</li><li>
<strong>Secure Access and Infrastructure Integration:</strong>Support secure remote access, cloud migration, load balancing, and network visibility initiatives to strengthen the security and availability of enterprise systems.</li><li>
<strong>Technical Communication:</strong>Explain security architectures, technical designs, and operational capabilities to customers and support teams, improving understanding of managed security services and security best practices.</li><li>
<strong>Technical Leadership and Mentorship:</strong>Work independently with limited supervision while coaching junior engineers, sharing technical knowledge, and encouraging collaboration across the team.</li><li>
<strong>Continuous Improvement:</strong>Identify opportunities to improve security monitoring, automation, incident response, system availability, and the effectiveness of cybersecurity infrastructure.</li><h2>Requirements:</h2><li>
<strong>Education:</strong>Bachelor's degree in Computer Engineering, Systems Engineering, or a related technical field.</li><li>
<strong>Professional Experience:</strong>At least 10 years of relevant experience supporting complex IT cybersecurity infrastructure, with a strong focus on risk mitigation, security architecture, and compliance.</li><li>
<strong>Splunk Architecture:</strong>At least five years of experience deploying and architecting distributed Splunk implementations.</li><li>
<strong>Splunk Expertise:</strong>Strong hands-on proficiency with Splunk Cloud, Splunk Enterprise Security (ES), Splunk SOAR, and Splunk User Behavior Analytics (UBA).</li><li>
<strong>Cybersecurity Technologies:</strong>Demonstrated experience designing and implementing SIEM solutions, IDS/IPS, web content filtering, network forensics, firewall management, and related security infrastructure.</li><li>
<strong>Security Integration:</strong>Experience integrating SIEM and SOAR platforms with endpoint detection and response solutions, network security tools, and IT service management or ticketing systems.</li><li>
<strong>Network Visibility:</strong>Knowledge of network traffic monitoring, deep packet inspection, flow mapping, and visibility platforms such as Gigamon and ExtraHop.</li><li>
<strong>Infrastructure and Cloud Security:</strong>Experience with secure remote access, cloud migration, load balancing, and distributed enterprise environments.</li><li>
<strong>Security Standards and Compliance:</strong>Familiarity with NIST and FedRAMP security frameworks, risk mitigation practices, and enterprise logging and monitoring requirements.</li><li>
<strong>Troubleshooting and Problem-Solving:</strong>Strong analytical skills and the ability to investigate complex infrastructure issues, resolve technical incidents, and provide escalation support.</li><li>
<strong>Communication and Leadership:</strong>Excellent technical communication skills, with the ability to explain complex architectural concepts to customers and technical stakeholders while mentoring junior colleagues.</li><li>
<strong>Professional Certification:</strong>Splunk Certified Architect certification is required.</li><li>
<strong>Preferred Certifications:</strong>Splunk Core Consultant, Splunk Advanced Power User, Splunk Cloud Admin, Palo Alto Networks Certified Network Security Engineer (PCNSE), or equivalent certifications.</li><li>
<strong>Work Arrangement:</strong>Ability to work remotely within the United States and collaborate effectively with distributed technical teams.</li><li>
<strong>Security Screening:</strong>No active security clearance is required. The selected candidate will be subject to a security investigation.</li><h2>Benefits:</h2><li>
<strong>Annual Salary:</strong>$170,144–$201,250, depending on experience, geographic location, and applicable contractual requirements. Actual compensation may fall outside this range.</li><li>
<strong>Employment Type:</strong>Full-time position, with a standard schedule of 40 hours per week.</li><li>
<strong>Remote Work:</strong>Fully remote opportunity available across the United States.</li><li>
<strong>Flexible Work Schedule:</strong>Full-flex workweek options designed to support autonomy, productivity, and work-life balance.</li><li>
<strong>Healthcare Coverage:</strong>Multiple medical plan options, including plans with Health Savings Accounts (HSAs), as well as dental and vision insurance.</li><li>
<strong>Retirement Benefits:</strong>401(k) retirement plan with employer matching contributions and pre-tax and post-tax contribution options.</li><li>
<strong>Paid Time Off:</strong>Typically 15 days of paid leave per calendar year for eligible new employees, prorated based on the hire date.</li><li>
<strong>Paid Holidays:</strong>Typically 10 paid holidays annually, subject to applicable eligibility and proration.</li><li>
<strong>Additional Leave:</strong>Access to eligible sick, personal, military, bereavement, jury duty, and parental leave benefits.</li><li>
<strong>Paid Family Leave:</strong>Eligible employees may receive up to 160 hours of paid family leave within a rolling 12-month period.</li><li>
<strong>Income Protection:</strong>Short-term and long-term disability benefits, life insurance, accidental death and dismemberment coverage, and other insurance options.</li><li>
<strong>Professional Development:</strong>Paid education, certification opportunities, and resources to expand technical expertise.</li><li>
<strong>Career Growth:</strong>Access to internal mobility opportunities and support for long-term professional advancement.</li><li>
<strong>Advanced Technology Exposure:</strong>Opportunities to work with modern cybersecurity, cloud, network visibility, and security automation technologies.</li><li>
<strong>Travel:</strong>Less than 10% travel expected.</li>