Staff Engineer II - Cyber

Job Title:
Staff Engineer II - Cyber

Location:
Block 23

What you'll do:
Western Alliance Bank is seeking a passionate, experienced, and results-driven Cyber Engineer to cultivate and manage a state-of-the-art SIEM infrastructure. The Staff Engineer II will develop and execute strategies to ingest security logs from various applications and infrastructure platforms. The Staff Engineer II will enrich logs with metadata from various threat intelligence sources. We want a creative, highly motivated engineer who will take initiative, have a good sense of urgency, and is comfortable working in a fast paced, agile environment. In this role, you will be assigned specific engineering tasks and meet weekly with your manager and peers towards completion of these tasks. You must be very good at documenting changes and have demonstrative experience in ITIL change management procedures. Likewise you will develop and maintain powershell, python, bash, and ruby scripts. You will also be required to complete continual training and certification in the field of security platform engineering. This role reports to the Director of the Security Monitoring Center

• Solid understanding of logging infrastructure concepts: syslog; log parsing; log de-duping; methods for log pulling; RFC 5424; CEF Format; JSON; key value pair format; log enrichment; log maintenance; log troubleshooting.
• Demonstrative SIEM administration. A solid understanding of and administrative experience with of Elastic Stack is a plus (aka: elasticsearch; elk; Elastic Logstash Kibana; ElasticCloud) is a plus.
• Demonstrative SOAR administration and playbook authoring. A solid understanding of and administrative experience with Palo Alto XSOAR is a plus.
• Coordinate activities with other SMC Engineers to drive accuracy, improve MTTR, and automate cyber analysis and enrichment.
• Solid understanding and demonstrative experience with Python, Powershell, and Bash.
• Capable of operating entirely day-to-day on a Linux platform.
• Demonstrative use and or development of AI driven work flows.

What you'll need:

• 6+ years of related experience in IT--Security, IT--App Support, IT--Development or similar field.
• Bachelor's degree in related field required.
• Advanced to expert experience with and knowledge of Linux, Python, PowerShell, SIEM and Bash. Solid understanding of authentication protocols SAML, SSO, and LDAP. Solid understanding of concepts regarding SIEM, SOAR, Firewall, Proxies, SSL/TLS, Secure Mail Gateways, Application Firewalls, NAC, Vulnerability Scanners, and EDR.
• Advanced experience with logging infrastructure concepts: syslog; log parsing; log de-duping; methods for log pulling; RFC 5424; CEF Format; JSON; key value pair format; log enrichment; log maintenance; log troubleshooting.
• Solid understanding of load balancers, DNS, SMTP, etc. for troubleshooting application functionality.
• Advanced experience of NIST, MITRE and Administration of either or all of an IT Automation platform, SOAR, Firewall, IAM platform, SIEM, cloud cyber defense platform etc.
• Experience with interpreting and analyzing packet captures via elasticsearch .
• Advanced speaking and writing communication skills.

Benefits you'll love:
We offer all the important things you'd want - like competitive salaries, an ownership stake in the company, medical and dental insurance, time off, a great 401k matching program, tuition assistance program, an employee volunteer program, and a wellness program. In addition, you'll have the opportunity to bolster your business knowledge, learning the ins and outs of how successful companies operate and manage their finances, giving you invaluable hands-on experience to help grow your career!

About the company:

Western Alliance Bank is a wholly owned subsidiary of Western Alliance Bancorporation. Alliance Bank of Arizona, Alliance Association Bank, Bank of Nevada, Bridge Bank, First Independent Bank, and Torrey Pines Bank are divisions of Western Alliance Bank; Member FDIC. AmeriHome Mortgage is a Western Alliance Bank company.

Western Alliance Bancorporation is committed to equal employment and will consider all qualified applicants without regard to race, sex, color, religion, age, nation origin, marital status, disability, protected veteran status, sexual orientation, gender identity or genetic information. Western Alliance Bancorporation is committed to working with and providing reasonable accommodations for individuals with disabilities. If you are an individual with a disability and require a reasonable accommodation to complete any part of the application process and/or need an alternative method of applying, please email or call . When contacting us, please provide your contact information and state the nature of your accessibility issue. We will only respond to inquiries concerning requests that involve a reasonable accommodation in the application process.

Western Alliance Bancorporation