Senior Information Security Engineer
(SIEM / Security Engineering Focus)
100% Remote
The Employbridge Cyber Security team is responsible for building and continuously improving the technologies, processes, and detection capabilities that protect our organization.
This is a hands-on security engineering position focused on security monitoring, SIEM engineering, detection development, data security, and security operations enablement.
This role is not a pure SOC monitoring position. We are seeking an engineer who enjoys building, tuning, automating, and improving security capabilities.
The successful candidate will take ownership of security monitoring technologies, work closely with incident responders and analysts, and help improve the organization's ability to detect and respond to threats.
Responsibilities
- Build and maintain security detections, correlation rules, alerts, dashboards, and reports.
- Improve visibility across enterprise environments through log source onboarding and telemetry enrichment.
- Tune noisy detections and reduce false positives while maintaining detection fidelity.
- Identify monitoring gaps and implement improvements to detection coverage.
- Troubleshoot log ingestion, parsing, normalization, and data quality issues.
- Security Operations Partnership
- Support security investigations by providing log analysis, event correlation, and technical expertise.
- Work closely with SOC analysts to improve alert effectiveness and investigative workflows.
- Assist with incident response activities and post-incident reviews.
- Assist with data protection initiatives involving sensitive information.
- Build out data protection / DLP systems, including classifications and policies.
- Partner with technical teams to strengthen controls surrounding sensitive data.
- Cloud & Endpoint Security
- Support monitoring and security initiatives across AWS and/or Azure environments.
- Integrate cloud telemetry into security monitoring platforms.
- Work with endpoint security technologies to improve detection and response capabilities.
- Collaborate with infrastructure teams to improve logging, monitoring, and security controls.
- Develop scripts and automation to improve operational efficiency.
- Automate reporting, enrichment, data collection, and repetitive security tasks where appropriate.
- Collaborate with infrastructure, application, and security teams to improve overall security posture
- Stay current on emerging threats, tools, and industry best practices
Knowledge & Experience
Required
- 4+ years of experience in cybersecurity, security engineering, systems administration, security operations, or a related discipline.
- Experience administering or engineering a SIEM platform in a production environment.
- Experience creating security detections, correlation rules, alerts, searches, or dashboards.
- Experience supporting security investigations through log analysis and event correlation.
- Familiarity with enterprise Windows, Linux, cloud, or networking environments.
- Strong troubleshooting and analytical skills.
- Strong written and verbal communication skills.
Nice to Have
- Experience with data protection or DLP tools
- Experience with endpoint security tools (EDR)
- Basic scripting or automation (Python or PowerShell)
- Familiarity with security frameworks (NIST, CIS, ISO)
- Relevant certifications (Security+, GIAC, CISSP, etc.)
Personal Attributes
- Proven analytical and problem-solving abilities
- Ability to dive deep into technical challenges and identify root causes
- Ability to prioritize and execute in a fast-paced environment
- Strong written, verbal, and interpersonal communication skills
- Highly self-motivated and detail-oriented
- Team-oriented mindset with strong collaboration skills
What Success Looks Like
- Improved detection coverage across critical systems.
- Reduced alert noise and false positives.
- Enhanced visibility through improved telemetry and dashboards.
- Improved support for security investigations.
- Measurable contributions to cloud security and data protection initiatives.
- Strong partnerships with SOC, infrastructure, and application teams.
Employbridge offers a competitive base salary plus monthly bonus potential! Additional benefits package for full time colleagues that includes:
- High IQ / EQ Team
- Comprehensive Medical, Dental & Vision benefits starting on the first of the month following hire date
- Pet Insurance starting on the first of the month following hire date
- 8 Paid Holidays per year
- Paid Time Off
- 401(k)
- Wellness Program
- Parental Leave
The anticipated annual base salary for this position in the US is $120,000 - $135,000. This range does not include any other compensation components or other benefits that an individual may be eligible for. The actual base salary offered depends on a variety of factors, which may include as applicable, the qualifications of the individual applicant for the position, years of relevant experience, specific and unique skills, level of education attained, certifications or other professional licenses held, and the location in which the applicant lives and/or from which they will be performing the job.
Qualified applications with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.
Employbridge offers a competitive benefits package which includes Medical/Dental/Vision, prescription drug benefits, 401(k), paid time off and holidays, a wellness program, and incentive programs. We also offer a variety of career paths and encourage promotion from within.
EmployBridge is an Equal Opportunity Employer committed to diversity and inclusion. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, marital status, disability, military or veteran status, genetic information, or any other characteristic protected by federal, state or local laws.