Production / Technical Support III

Role Overview

We are seeking an experienced IT Security professional to join our production services team. The ideal candidate will manage and optimize SIEM/SOAR platforms, primarily Splunk, for advanced threat detection, automation, and incident response. This role involves collaborating with IT teams to build detection rules, automation playbooks, and dashboards to strengthen the security posture within a fast-paced FinTech environment.

Responsibilities

• Manage, configure, and optimize SIEM/SOAR platforms, with a primary focus on Splunk.
• Develop and implement detection rules, dashboards, and automation playbooks.
• Monitor and analyze security events to identify threats and reduce incident response times.
• Provide production support, including incident response, problem engagement, service restoration, and root cause analysis.
• Facilitate and coordinate permanent fixes in accordance with best practices and SLAs.
• Collaborate with other team members within and outside the group to address complex challenges.
• Participate in on-call coverage and be available to work off-hours as needed.

Required Qualifications

• Experience: 5+ years of hands-on expertise in SIEM/SOAR administration, security operations, and production support.
• Over 10 years of hands-on experience within the Identity and Access Management (IAM) domain.
• Senior-level production support and troubleshooting skills in SIEM/SOAR, Splunk, and IAM technologies.
• Strong understanding of cybersecurity frameworks, threat detection, and incident response.
• Familiarity with the ITIL framework.

Technical Skills

• Expert-level hands-on knowledge of Splunk, including searches, dashboards, alerts, and playbooks.
• Expert-level experience with Windows OS, RedHat Linux, SQL queries, and SQL/Oracle databases.
• Proficiency with MFA technologies.
• Knowledge of RedHat Linux OpenShift containers, Atlassian JIRA, GitHub, Ansible, Jenkins, ITSM Remedy, Dynatrace, and PowerShell/Unix scripting.
• Experience with cloud technologies and CI/CD DevOps tools.

Preferred Qualifications

• CISSP or other equivalent Information Security domain certifications.
• Strong understanding of network technologies.
• Experience with Tower or BladeLogic.

Benefits

• Supplemental benefits including medical, dental, vision, life, disability, and other insurance plans.
• ESPP (employee stock purchase program).
• 401K program with company match after 12 months of tenure.
• HSA (Health Savings Account on the HDHP plan).
• SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions.
• Corporate discount savings program and other discounts.
• On-demand training program.
• Access to certification prep and a library of technical and leadership courses/books/seminars after 6+ months of tenure.
• Certification discounts and perks to associations including CompTIA and IIBA.
• Dedicated customer service team for Consultants to address benefits and other resources.
• Certified Career Coach.

Pay & Schedule

• Location: Chandler, Arizona (Onsite)