Sr. Security Engineer SIEM & NDR
Share
Job Location:
Ann Arbor, MI - USA
Salary:
Not Disclosed
Posted on:
Yesterday
Vacancies:
1 Vacancy
Job Summary
Company Overview
KLA is a global leader in diversified electronics for the semiconductor manufacturing ecosystem. Virtually every electronic device in the world is produced using our technologies. No laptop smartphone wearable device voice-controlled gadget flexible screen VR device or smart car would have made it into your hands without us. KLA invents systems and solutions for the manufacturing of wafers and reticles integrated circuits packaging printed circuit boards and flat panel displays. The innovative ideas and devices that are advancing humanity all begin with inspiration research and development. KLA focuses more than average on innovation and we invest 15% of sales back into R&D. Our expert teams of physicists engineers data scientists and problem-solvers work together with the worlds leading technology providers to accelerate the delivery of tomorrows electronic devices. Life here is exciting and our teams thrive on tackling really hard problems. There is never a dull moment with us.Job Description/Preferred Qualifications
The Cybersecurity group at KLA is involved in every aspect of the global business. The KLA Cybersecurity group defends against cyber-attacks and provides cybersecurity tools incident response services and assessment capabilities to safeguard the environments that support the essential operations of KLA. We are passionate about identifying adversarial activities and anticipating a wide variety of threats to strengthen our defenses and the overall protection of KLA Intellectual Property.
We are seeking an experienced and highly motivated Senior Security Engineer to join our Cyber Operations team. This role will focus on the engineering implementation and operational support of our Security Information and Event Management (SIEM) and Network Detection & Response (NDR) platforms. The successful candidate will play a critical role in advancing our organizations threat detection and response capabilities through expert management of security technologies and collaborative engagement with various cybersecurity stakeholders.
Responsibilities:
Design implement andmaintainthe Google SecOps SIEM platform including log ingestion parsing rule creation and dashboard development.
Leverage modern datapipeline management and logreduction technologies to improve data ingestion efficiency andoptimizestorage management.
Build andmaintainsystem health checks highavailability configurations and reliable logpipeline workflows.
Collaborate with customers to understand their security operations needs and develop tailored SIEM strategies and roadmaps.
Enable customers to finetune detection logic correlation rules and alerting mechanisms to maximize effectiveness and minimize noise.
Integrate SIEM platforms with broader security ecosystems including SOAR EDR threat intelligence and cloudnative security tools.
Continuouslyoptimizedetection rules use cases UEBA analytics and SOAR playbooks to enhance threat visibility and reduce false positives.
Develop andmaintaindocumentation for SIEM/NDR architecture configurations and operational procedures.
Monitor troubleshoot and resolve issues related to SIEM and NDR platform availability performance and data quality.
Stay current with emerging threats vulnerabilities and advancements in security technologies to recommend improvements.
Support compliance and audit activities by ensuring proper log retention data integrity and access controls
Minimum Qualifications
Bachelors degree in Computer Science Information Security or a related field or equivalent professional experience
Five (5) years of handson cybersecurity engineering experience focusing on SIEM platforms in large enterprise environments
Three (3) years of proven experience in Google SecOps SIEM administration engineering and integration
Three (3) years of experience working with Vectra or a similar NDR platform
Expertlevel understanding of security telemetry including logs from firewalls endpoints cloud services identity providers and applications
This is a Hybrid role and will be based out of our Midwest HQ in Ann Arbor MI
Interns are eligible for some of the benefits listed. Our pay ranges are determined by role level and location. The range displayed reflects the pay for this position in the primary location identified in this posting. Actual pay depends on several factors including state minimum pay wage rates location job-related skills experience and relevant education level or training. We are committed to complying with all applicable federal and state minimum wage requirements where applicable. If applicable your recruiter can share more about the specific pay range for your preferred location during the hiring process.
KLA is proud to be an Equal Opportunity Employer. We will ensure that qualified individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process to perform essential job functions and to receive other benefits and privileges of employment. Please contact us at or at 1- to request accommodation.
Be aware of potentially fraudulent job postings or suspicious recruiting activity by persons that are currently posing as KLA employees. KLA never asks for any financial compensation to be considered for an interview to become an employee or for equipment. Further KLA does not work with any recruiters or third parties who charge such fees either directly or on behalf of KLA. Please ensure that you have searched KLAs Careers website for legitimate job postings. KLA follows a recruiting process that involves multiple interviews in person or on video conferencing with our hiring managers. If you are concerned that a communication an interview an offer of employment or that an employee is not legitimate please send an email to to confirm the person you are communicating with is an employee. We take your privacy very seriously and confidentially handle your information.
Required Experience:
Senior IC
Key Skills
- Splunk
- IDS
- Network security
- Computer Networking
- Identity & Access Management
- PKI
- PCI
- NIST Standards
- Security System Experience
- Information Security
- Encryption
- Siem
About Company
Calling the adventurers ready to join a company that's pushing the limits of nanotechnology to keep the digital revolution rolling. At KLA, we're making technology advancements that are bigger—and tinier—than the world has ever seen. Who are we? We research, develop, and manufacture t ... View more
