Cybersecurity SIEM Engineer - Remote

Overview

The Cybersecurity SIEM Engineer will be responsible for onboarding and normalizing data sources, developing custom content, and improving cybersecurity maturity for Cardinal Health’s cybersecurity platform.

In Short

• Full-time remote position in cybersecurity.
• Focus on onboarding data and developing content for Splunk.
• Work with Linux servers, containers, and storage buckets.
• Integrate platforms through APIs.
• Continuous optimization and monitoring of platforms.
• Collaborate with Cyber Threat & Response teams.
• Mentor team members.
• Participate in POC/RFP by testing solutions.
• Benefits include medical, dental, vision coverage, and more.
• Inclusive workplace that values diversity.

Requirements

• Experience onboarding data and developing content for Splunk.
• Excellent Splunk query and dashboarding skills.
• Proficient with Linux Operating Systems.
• Experience working with APIs.
• Ability to read event logs from IT and Security platforms.
• Collaboration skills with various teams.
• Familiarity with security frameworks is a plus.
• Experience with Python and Agile development is preferred.
• General knowledge of networking and cloud technologies.
• Experience in large enterprise environments is a plus.

Benefits

• Medical, dental, and vision coverage.
• Paid time off and health savings account (HSA).
• 401k savings plan and flexible spending accounts (FSAs).
• Short- and long-term disability coverage.
• Work-life resources and paid parental leave.
• Access to wages before payday with myFlexPay.
• Healthy lifestyle programs.
• Commitment to employee development and well-being.
• Fun and collaborative team atmosphere.
• Encouragement of diverse backgrounds and experiences.