Content Engineer / SIEM Engineer

Profile

Content Engineer / SIEM Engineer
at **MEMBERS ONLY**SIGN UP NOW***.
Mountain View, CA
BE PART OF BUILDING THE FUTURE.
Since our founding in 2009, **MEMBERS ONLY**SIGN UP NOW***. has empowered innovators to build a better world with data. In less than eight years, Pure reached $1B in sales, faster than nearly every enterprise company in history, and our incredible growth continues to outpace the competition.
Our mission? Deliver a simple, evergreen data platform that enables everyone to turn data into intelligence and advantage. The secret sauce? More than 3,000 team members (and growing!) around the world who join forces to invent the next big thing. And then the next one.
The world is experiencing a revolution driven by next-generation technology like AI, machine learning, virtual reality, quantum computing, and self-driving cars—all of which require unprecedented amounts of data. This sets the stage for Pure’s technology to grow exponentially in the coming years. 
We’ve only scratched the surface of our ambitions
, and as we continue to gobble up market share, we’re blazing trails and setting records:
For five straight years, Gartner has named Pure  a leader in the Magic Quadrant for Solid-State Arrays
Our customer-first culture and unwavering commitment to innovation have earned us a Satmetrix  Net Promoter Score in the top 1% of B2B companies globally
Pure puts a  premium on the future
, investing 26% of revenue into R&D.
If you, like us, say “bring it on” to exciting challenges that change the world, we have endless opportunities where you can make your mark.
SHOULD YOU ACCEPT THIS CHALLENGE...
**MEMBERS ONLY**SIGN UP NOW***. is currently seeking a Content Engineer with strong Splunk, data, and incident response experience. Candidate is responsible for all aspects of security detection engineering and correlation rules management. This hands-on technical role shares responsibilities across the team in threat identification, incident response, and policy development.  The Content Engineer will build and improve technical solutions in collaboration with the security team’s internal partners and constituents.
You will be responsible for working with the security operations lead to develop security use cases that apply across the entire company and its operations.  Your mission is to create the rulesets and policies that enable the security operations team to positively identify attacks, intrusions, and data loss incidents.  You do this through understanding business workloads and applying security use cases to the event data generated by those processes.  Your only limitation is the creativity and imagination you incorporate into the practice of detection and correlation refinement.  Because your best friend is Automation and your cousin is named “True Positive”, you ensure we only respond to the events that matter.
Computer networking concepts and protocols, and network security methodologies.
Vulnerability management frameworks and concepts such as CVE, and CVSS Threat Intelligence and visibility into new threats.
Risk management processes (e.g., methods for assessing and mitigating risk).
Cybersecurity and privacy principles.
Deep knowledge of SIEM technologies; direct experience with Splunk is preferred
Experience with SOC technologies such as IDS/IPS, UTM firewalls, EDR, anti-virus, network-based threat detection, and netflow.
Experience working with cloud computing platforms.
Be able to illustrate and explain use cases for implementation of SIEM alarms, watchlists, reporting and correlations of data from and covering multiple data sources.
Work with business units to map security use cases to their event data.
Make recommendations on required mitigation & remediation approaches.
Collaborate on SIEM functional requirements logging, event collection, normalization, correlation, storage, system access, reporting, and customization.
Ability to automate tasks using a preferred language (e.g. Python).
Ability to interact with common APIs.
Excellent interpersonal, organizational, communication, and writing skills.
WHAT YOU'LL NEED TO BRING TO THIS ROLE......
6 years work experience in Information Technology
3 years working in an incident response function.
Experience researching, analyzing, and resolving complex problems with minimal supervision.
Must have extensive experience in configuring and working with a SIEM.
Must be successful in working with teams outside Corporate Security.
Bachelor’s degree or equivalent experience.
Splunk Certifications in any of the following: Certified Admin, Certified Architect, Certified Consultant a plus.
BE YOU—CORPORATE CLONES NEED NOT APPLY.
Pure is where you ask big questions, think differently, and make an impact. This is not just a job, but a place where you have a voice and can accelerate your career. We value unique thoughts and celebrate individuality, and with ample opportunity to learn, develop yourself, and expand into different roles, joining Pure is an investment in your career journey.
Through our Pure Equality program, which supports a flourishing field of employee resource groups, we nourish the personal and professional lives of our team members. And our Pure Good Foundation gives back to local and global communities through volunteering and grants.
And because we understand the value of bringing your full and best self to work, we offer a variety of perks to manage a healthy balance, including flexible time off, wellness resources, and company-sponsored team events.  
PURE IS COMMITTED TO EQUALITY.
Pure is proud to be an equal opportunity and affirmative action employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age, status as a protected veteran, status as an individual with a disability, or any other characteristic legally protected by the laws of the jurisdiction in which you are being considered for hire. If you need assistance or an accommodation due to a disability, you may contact us at  ****

Company info

Sign Up Now - MiamiCrossing.com