Cybersecurity Engineer SIEM & Endpoint Security

Job Role: Cybersecurity Engineer SIEM & Endpoint Security

Location: Remote

Job Description:

About the Opportunity

A large healthcare services organization in the search for a Cybersecurity Engineer to assist with SIEM tuning, endpoint detection optimization, and alert fatigue reduction. This role will be instrumental in improving the effectiveness and signal-to-noise ratio of the organization's security monitoring and response capabilities.

This is a hands-on, technical contractor role working closely with Security Operations, Infrastructure, and IT teams in a highly regulated healthcare environment.

Key Responsibilities

• Perform SIEM tuning and optimization to reduce false positives and improve alert fidelity
• Analyze security events and logs to identify noise, redundancies, and misconfigured detection rules
• Optimize CrowdStrike Falcon policies, detections, and workflows to minimize unnecessary alerts
• Collaborate with SOC analysts to refine use cases, correlation rules, and severity thresholds
• Investigate recurring alerts and recommend long-term remediation strategies
• Support incident response activities by improving detection logic and alert context
• Create and maintain documentation for tuning changes, detection standards, and best practices
• Ensure security monitoring aligns with healthcare compliance requirements (e.g., HIPAA, HITECH)
• Work closely with client stakeholders to deliver measurable improvements in alert quality

Required Skills & Experience

• 5+ years of experience in Cybersecurity or Security Operations
• Strong hands-on experience with SIEM platforms (Splunk, Sentinel, QRadar, or similar)
• Deep practical experience with CrowdStrike Falcon (policy tuning, detections, alert handling)
• Proven success in reducing alert fatigue and improving SOC efficiency
• Ability to work independently in a contractor-based engagement
• Strong communication skills and ability to explain technical changes to non-security stakeholders

Preferred Qualifications

• Experience in healthcare or other regulated environments
• Familiarity with compliance and audit-driven security requirements
• SOC or incident response background
• Relevant certifications (e.g., Security+, GCED, GCIA, CISSP not required)