SIEM/SOAR Production Services Specialist ll

Responsibilities

• Leads production support triage efforts, manages bridge line troubleshooting, engages in technical research, and escalates issues to leadership as needed
• Serves as a focal point for the customer, client, and associate experience, restoring complex production incidents under tight Service Level Agreements
• Identifies and/or validates business impacts through interpretation of monitors, dashboards, and logs to communicate with leadership and vendors
• Manages activities to identify incident root cause, resolution, preventative actions, and change requests, and reports on incident data quality
• Promotes and enforces production governance during triage/testing and identifies production failure scenarios, vulnerabilities, and opportunities for improvement
• Serves as a subject matter expert for applications within a portfolio, leveraging extensive knowledge of application functionalities and application flows
• Affords assessments and prioritizes research requests, ad hoc reports, and offline incidents at the direction of senior team members and delegates work as needed to team members and peers

Qualifications

• MUST BE ABLE TO WORK SATURDAY OR SUNDAY WHEN ON CALL OR FOR NEW RELEASES
• 5+ years of experience in SIEM/SOAR administration and security operations
• Well conversant with 5 C's of cyber security - Change, Compliance, Cost, Continuity and Coverage
• Passionate about cybersecurity and automation, a SIEM/SOAR expert to help us strengthen our cyber resilience, turning Splunk skills into impact
• Use Splunk skills to fight threats and keep financial services secure
• Strong hands-on knowledge of Splunk (searches, dashboards, alerts, playbooks)
• Solid understanding of cybersecurity frameworks, threat detection, and incident response
• 5+ years of production support experience with expert level knowledge of MFA technologies, Splunk. Window OS, SQL/Oracle DB & Unix/Linux
• Excellent knowledge of Identity, Authentication and Access Management (IAM) domain including SRE and DevOps space
• Must have senior level production support experience and troubleshooting skills in SIEM/SOAR space, Splunk and IAM technologies
• Must be able to comply with bank regulatory and compliance policies
• Must have expert level of Linux experience and must be well versed in Splunk queries
• Well versed with ITIL framework
• Excellent Communication Skills lateral and vertical - be able to clearly explain issues, their impact and how to address them
• Must be a great team player - be able to collaborate with other team members within or outside the group
• Must be available for on-call coverage and willing to work off hours as and when needed
• Must be willing to work on-site 3 days a week as per current bank policies
• Demonstrate a strong work ethics and takes pride in accomplishment
• Must be able to handle and work under pressure and stress
• Attention to detail - able to evaluate smallest details
• Problem-solving - be able to address complex challenges in creative ways