{bc}
Apply
workday

Lead Cybersecurity Engineer - SIEM/AI

S&P Global Inc.
Bozeman, USA
Full-time
Lead · 6+ years experience
Hybrid
Discovered 4 days ago
python

Full Job Posting

What You’ll Do

  • Lead the ongoing maturity and optimization of the Google SecOps platform, improving detection coverage, data quality, operational effectiveness, and overall SIEM capabilities.
  • Design, build, tune, and maintain detection rules, parsers, data pipelines, and log integrations to ensure reliable visibility across the enterprise.
  • Develop and enhance high-confidence detection content by partnering with Threat Intelligence and Cyber Defense teams to convert emerging threats into actionable alerts.
  • Evaluate existing Cyber Defense workflows and identify opportunities to streamline operations through AI-driven processes and automation.
  • Design and implement AI-assisted workflows, tools, and custom agents that improve analyst efficiency, and support the evolution of AI-driven alert triage by improving the quality, consistency, and context of the data and detections that power automation.
  • Build integrations, automations, and enrichment capabilities that reduce manual effort, accelerate investigations, and improve response times.
  • Define and track key performance metrics, including detection effectiveness, false-positive reduction, automation adoption, and analyst productivity, to measure program success.
  • Create and maintain clear documentation for detections, engineering solutions, workflows, and operational processes to ensure consistency and long-term maintainability.
  • Partner closely with Security Operations, Threat Intelligence, Incident Response, and Engineering teams to continuously improve detection and response capabilities across the organization.
  • What We’re Looking For

Required Qualifications

  • 6+ years of hands-on experience engineering and optimizing enterprise SIEM platforms, with experience implementing and maturing Google SecOps or a comparable SIEM solution.
  • Strong expertise in Google SecOps, including detection engineering, parser development, log onboarding, data normalization, and platform administration, with a proven record of improving SIEM effectiveness through expanded detection coverage, tuning, and data quality improvements.
  • Experience applying AI and automation within security operations, including alert triage, investigations, threat hunting, case management, or other Cyber Defense workflows, and the ability to evaluate existing processes and implement solutions that reduce manual effort.
  • Proficiency in Python or similar scripting languages to develop integrations, automations, and workflow enhancements.
  • Strong understanding of detection engineering, attacker tactics and techniques, security telemetry, and the end-to-end security data lifecycle, with strong analytical, problem-solving, and written and verbal communication skills.
  • This is a hybrid role with in-office expectations determined by location and subject to change based on evolving business needs.
  • This position is open to applicants who are currently authorized to work in the United States and will not require employer sponsorship now or in the future.
  • The anticipated annual base salary range for this position is $112,000 - $168,000. Actual compensation within this range will be determined based on a variety of factors, including geographic location, relevant experience, skills, qualifications, and internal equity considerations.
  • Mobility Global is committed to providing competitive compensation that reflects local market conditions and individual contributions. In addition to base salary, employees may be eligible for incentive compensation, long-term incentives, and a comprehensive benefits package, where applicable.
  • What’s In It for You
  • Competitive compensation package, including base salary and incentive opportunities where applicable.
  • Comprehensive health and wellness benefits for employees and eligible dependents.
  • Retirement savings programs, including company matching contributions where available.
  • Equal Opportunity Employer
  • Mobility Global is proud to be an Equal Opportunity Employer. We value diverse perspectives and are committed to fostering an inclusive workplace where everyone is respected, supported, and empowered to succeed. We provide reasonable accommodations throughout the hiring process and employment for qualified individuals with disabilities.
  • Recruitment Fraud Alert
  • Mobility Global will never ask candidates to pay money at any stage of the hiring process, including for applications, interviews, background checks, training, or equipment. If you receive a suspicious communication or request for payment or personal financial information, please exercise caution and report it immediately.

Apply for this job in 1 click

Skip the repetitive application forms

Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.

Sarah M.James T.Maya R.

Trusted by over 500,000 job seekers on Base Career

Start Free Today

More from this employer

More jobs at S&P Global Inc.

Sales Compensation Analyst (Compensation & Payroll Operations)

George Town, IND

Discovered TodayFull-time

IT Service Desk Manager, India & APAC

Gurugram, IND

Discovered 2 days agoFull-time

Cloud Ops Engineer

Gurugram, IND

Discovered 3 days agoFull-time

AP Operations Lead

Centreville, USA

Discovered 3 days agoFull-time

Senior Software Engineer (UI Developer - React)

Gurugram, IND

Discovered 5 days agoFull-time

Product Marketing Manager

, USA

Discovered 6 days agoFull-time

Principal Security Architect

New York City, USA

Discovered 6 days agoFull-time

Principal Accountant - Intercompany Accounting

Centreville, USA

Discovered 1 weeks agoFull-time