Alliant Credit Union

Sr. SIEM Engineer

Start a Rewarding Career with Alliant:

Primary Function: The Sr. SIEM (Security Information and Event Management System) Engineer is responsible for ensuring system logs and events are properly identified, alerted, analyzed, communicated and reported. This role will minimize fraud and security intrusions by effectively leveraging the organization’s Security Information and Event Management (SIEM) system.

Additionally, this role will aide in the monitoring, threat analysis, trend analysis, troubleshooting of security device monitoring and incident investigation using infrastructure and applications logs from across the enterprise.

Responsibilities:

SIEM Management and Tuning – 40%

• Designing, writing and monitoring rules to safeguard Alliant’s information assets, and effectively identify and mitigate both internal and external threats to these goals
• Facilitating the monitoring, detection, analysis and resolution of security and fraud incidents
• Providing infrastructure protection through continuously analyzing alerts and logging
• Developing new triggers and reporting within SIEM and log retention/management tools
• Writing rules in Security Information and Event Management (SIEM) system
• Writing rules in real-time web fraud detection products
• Reviewing SIEM logs and alerts to identify and report possible security and fraud events
• Working with other teams and third party vendors to research and resolve security, fraud and related system integration issues

Data Management and Analysis – 30%

• Automating the collection, parsing and importing of log files
• Designing and writing MS SQL queries to analyze data and confirm alerts are working as desired
• Coordinating with multiple technology staff and other business stakeholders in response to a potential detected incident

Security Management – 30%

• Researching and identifying key indicators of malicious activities on the network and end user workstations
• Reviewing industry and vendor security alerts for vulnerabilities and security and fraud issues
• Working with peer teams to create mitigation solutions based on vendor advisories
• Maintaining awareness of trends in security, fraud, regulatory, technology and operational requirements
• Participating in security and fraud incident response efforts by maintaining an in-depth knowledge of common attack vectors, common security/fraud exploits, and countermeasures
• Completing tasks designed to ensure security of the organization's systems and information assets and the reduction of fraud.
• Participating in post-mortem investigation of security and fraud incidents, preparing related incident reports documenting the findings and enhancing systems to reduce similar events
• Initiating escalation procedure to counteract potential threats/vulnerabilities
• Actively participating in the evaluation and selection of new security and anti-fraud tools
• Owning and managing assigned tickets from start to resolution

Adhere to and ensure compliance of all business transactions with policy and process of the Bank Secrecy Act. Ensures compliance with all applicable state and federal laws, company procedures and policies. Maintains integrity and ethics in all actions and conversations with or regarding credit union members and their accounts; complies with Privacy Act directives.

Qualifications:

• 7+ years of hands-on Information Security and fraud detection. Experience within a bank or Credit Union with understanding of how banking transactions work preferred.
• A strong background in writing complex SQL and managing SIEM systems in a bank or Credit Union environment is strongly preferred.
• Bachelor’s degree preferred
• Proven work experience in managing rights and trouble shooting of operating systems (e.g., Windows, Redhat Linux) and SIEMs.
• Years of hands-on experience with one or more industry leading SIEM products and related systems (e.g., Splunk, LogRhythm, QRadar, RSA Web Threat Detection), MS SQL, Cisco, Microsoft server products, Redhat Linux, DLP products (e.g, Symantec DLP, Websense DSS) and other log management products.
• Experience performing event correlations and writing regular expressions
• Experience creating custom rules in SIEM products
• Experience analyzing fraud trends and proactively designing solutions to mitigate them
• Ability to create complex SQL queries, analyze results and identify trends
• Available to be on-call for Incident Response as needed
• Direct experience or familiarity with cyber-attack vectors
• Demonstrated ability to work effectively with all levels of an organization
• Strong interpersonal and written/verbal communication skills (this role involves communicating with end users within various departments such as Fraud and DBAs)
• The ability to achieve goals through influence, collaboration, and cooperation
• Proficient with Microsoft Office Suite

Alliant Credit Union is proud to be an EEO/AA employer.