Western Alliance Bank is seeking a passionate, experienced, and results-driven Cyber Engineer to cultivate and manage a state-of-the-art SIEM infrastructure. The Staff Engineer II will develop and execute strategies to ingest security logs from various applications and infrastructure platforms.
Requirements
- Solid understanding of logging infrastructure concepts: syslog; log parsing; log de-duping; methods for log pulling; RFC 5424; CEF Format; JSON; key value pair format; log enrichment; log maintenance; log troubleshooting.
- Demonstrative SIEM administration. A solid understanding of and administrative experience with of Elastic Stack is a plus (aka: elasticsearch; elk; Elastic Logstash Kibana; ElasticCloud) is a plus.
- Demonstrative SOAR administration and playbook authoring. A solid understanding of and administrative experience with Palo Alto XSOAR is a plus.
- Coordinate activities with other SMC Engineers to drive accuracy, improve MTTR, and automate cyber analysis and enrichment.
- Solid understanding and demonstrative experience with Python, Powershell, and Bash.
- Capable of operating entirely day-to-day on a Linux platform.
- Demonstrative use and or development of AI driven work flows.
Benefits
- Competitive salaries
- Ownership stake in the company
- Medical and dental insurance
- Time off
- 401k matching program
- Tuition assistance program
- Employee volunteer program
- Wellness program