Security Data & SIEM Engineer

About the role

Security Data & SIEM Engineer at JIN Johnson Controls. As part of Johnson Controls’ Global Zero Trust & Security Analytics team, the Security Data & SIEM Engineer will be responsible for the day-to-day operation, management.

What you'll do

• As part of Johnson Controls’ Global Zero Trust & Security Analytics team, the Security Data & SIEM Engineer will be responsible for the day-to-day operation, management
• This role is heavily focused on Cribl Stream log stream processing, log parsing, and CrowdStrike NextGen SIEM data onboarding
• Daily Operations & Telemetry Health: Serve as the operational SME for the Cribl Stream pipeline and CrowdStrike NextGen SIEM environment. Conduct daily health checks
• Log Ingestion, Parsing & Schema Normalization: Onboard new enterprise log sources (Firewalls, EDR, Web Proxies, Active Directory
• Log Cost Optimization & FinOps: Implement intelligent filtering, deduplication, and routing rules in Cribl Stream to strip unnecessary log noise

What you need

• SIEM
• Network security
• EDR
• Firewalls
• Splunk
• Python

Good to have

• Azure
• AWS
• JIRA
• ServiceNow
• Active Directory
• REST APIs