Senior Engineer, Managed Detection and Response (Remote)

Company: Presidio
Location: Missoula
Posted on: November 19, 2022

Job Description:

SEIZE THE OPPORTUNITY TO BE A PART OF SOMETHING GREAT!

Presidio is on the leading edge of a technology-driven movement to transform the way business is done, for our customers and our customers' customers. Joining Presidio means immersing yourself in a culture of self-starters, collaborators and innovators who make real, lasting change in the marketplace via cutting-edge technology and business solutions. At Presidio, we know that it's our people that make the connections happen.

WHY YOU SHOULD JOIN US? You will set your career on track for outstanding achievement with a company that knows no limits. Presidio is a leading a global digital services and solutions provider focused on Digital Infrastructure, Business Analytics, Cloud, Security & Emerging solutions.

THE ROLE: Senior Engineer

Job Summary:

As an internal Senior Engineer, your primary focus is to support and innovate our Cloud SIEM platforms and Universal Data Pipeline in support of the Presidio Managed Detection and Response service offering.

This role will follow a Monday - Friday shift from 8-5 CST with an On-call schedule rotation for after-hours and weekend coverage.

Travel Requirements:

In this role you will be expected to travel up to 5%. This is a remotely-based role.

Job Responsibilities:

• Configure, manage, operate, and administer the platform for several managed Client SIEM environments
• Designing, developing, and maintaining various data pipelines via Cribl solutions.
• Serve as the Subject Matter Expert for onboarding SIEM components, and various data sources for existing and new clients
• This position also serves as an escalation point for critical and complex client issues, and performs configuration and testing of products, and assists with developing and documenting work processes and trains other members of the team
• Provide technical leadership on projects requiring other group engineers.
• You enjoy continuously identifying important work and are able to engage other teams without explicit direction
  Required Skills:
  
  • Strong experience with SIEM and data analysis tools like ELK and Splunk
  • Strong understanding of streaming data and log management
  • Software development and/or scripting experience (regex, python, SQL etc.) is desired along with the ability to work at the system command line interface.
  • Some depth and exposure in at least one of the major public cloud providers, AWS, Azure, GCP, with a basic understanding of the architecture and security monitoring points
  • Understanding of SOC environment and the current pains within
  • Familiar with the changing modern application landscape/ecosystem, and the challenges it presents to security teams
  • Willingness to work on-call rotated schedules for after hours and weekend coverage.
    Education and Experience:
    
    • 5-8 years' experience in a Security Operations Center or similar Cyber Security Engineering role, excluding time spent on an internship or work experience program
    • 3 years of proven experience and technical skills in various SIEM technologies such as Elastic, Logz.io, Azure Sentinel to deliver streaming data for analysis.
      *****
      
      ABOUT PRESIDIO
      
      Presidio is committed to Diversity, Equity, and Inclusion at the highest levels and has strengthened its drive to build and drive systemic DE&I change process across all levels of the organization. Cultivating a culture of inclusion where the expression of all our differences are valued, celebrated, and add to our collective achievements.
      
      Presidio is a global digital services and solutions provider accelerating business transformation through secured technology modernization. Highly skilled teams of engineers and solutions architects with deep expertise across cloud, security, networking and modern data center infrastructure help customers acquire, deploy and operate technology that delivers impactful business outcomes. Presidio is a trusted strategic advisor with a flexible full life cycle model of professional, managed, and support and staffing services to help execute, secure, operationalize and maintain technology solutions. We serve as an extension of our clients' IT teams, providing deep expertise and letting them focus on their core business. Presidio operates in 40 US offices and offices in Ireland, London, Singapore, and India.
      
      For more information visit:
      
      *****
      
      Presidio is an Equal Opportunity / Affirmative Action Employer / VEVRAA Federal Contractor. All qualified candidates will receive consideration for this position regardless of race, color, creed, religion, national origin, age, sex, citizenship, ethnicity, veteran status, marital status, disability, sexual orientation, gender identification or any other characteristic protected by applicable federal, state and local statutes, regulations and ordinances.
      
      To read more about discrimination protections under Federal Law, please visit:
      
      If you have any difficulty using our online system and need an accommodation in the job application process due to a disability, please send an email to ...@presidio.com for assistance.
      
      Presidio is a VEVRAA Federal Contractor requesting priority referrals of protected veterans for its openings. State Employment Services, please provide priority referrals to ...@presidio.com .
      
      RECRUITMENT AGENCIES PLEASE NOTE:
      
      Agencies/3 rd Parties may not solicit to any employee of Presidio. Any candidate information received from any Agency/3 rd Party will be considered a gift and property of Presidio, unless the Agency/3 rd Party is an Authorized Vendor of Presidio with an up-to-date Presidio Contract in hand signed by Presidio Talent Acquisition. No payment will be made to any Agency/3 rd Party who is not an Authorized Vendor, nor has specific approval in writing from Presidio Talent Acquisition to engage in recruitment efforts for Presidio.
      
      #YMCN_1
      
      #CB
      
      #TALROO Associated topics: crime scene, detective, fingerprint, inspector, investigate, investigation, investigative, investigator

Keywords: Presidio, Missoula , Senior Engineer, Managed Detection and Response (Remote), Other , Missoula, Montana