Information Security SIEM Engineer

Job description

**It All Starts with Our People**

As the leader in automotive preventive maintenance, Valvoline has a proven track record of growth.

We continue to invest in our people, processes, and technology to strengthen our ability to efficiently deliver Quick, Easy, Trusted service across all our stores – every day.

We're not just in the car business; we're in the people business.

And we're looking for humble, hungry, and smart people to help us shape the future of mobility.

If you're hungry to drive change and seek a dynamic, collaborative environment that fuels both personal and professional growth, you've found your place with us.

Our highest priority is creating a welcoming workplace with team members from a wide variety of diverse backgrounds and experiences.

**How You'll Make a Difference**

Valvoline has a rewarding opportunity for an **Information Security SIEM Engineer** .

In this role, you will be responsible for the consultation, development, implementation, and support of processes and technologies that relate to the collection and ingestion of security and other events into a SIEM or similar security-focused platform.

The individual in this position interacts closely with our peer Information Security and Infrastructure teams along with product vendors and IT service management to identify security requirements, identify material weaknesses in our current configurations, and develop security baselines that improve security capabilities and reduce Valvoline’s risk posture.

In addition, the Information Security SIEM Engineer will assess opportunities for improving Valvoline's operating system logging capabilities and controlling effectiveness, including new security features.

+ Logging and SIEM Integration: Prioritize logging sources that are needed for information security and work with the appropriate teams to have them sent to the SIEM.

Develop alerts, reports, and dashboards in the SEIM that improve our operational capabilities.

Provide subject matter expertise in regard to logging best practices and the SIEM including parsing and storage of logs.

Manages and supports the corporate Syslog instance.

Works with our operations team to translate their detection use cases into alerts.
+ Threat Intelligence: Collect and operationalize threat intelligence including TTPs, IoTs and IoCs from multiple sources and feed that to our SIEM and other tools.
+ Engineering Support: Assist colleagues within the team to provide administrative backup and cross-training.

Perform periodic health checks to ensure information security systems are functioning as expected.
+ Knowledge Transfer: Assist and train other Information Security colleagues in the use of new security tools, emerging technologies, best practices, and the resolution of common security engineering issues.

Provide mentoring for more junior colleagues interested in engineering
+ Vendor Relations: Maintain working relationships with information security vendors and Valvoline IT teams to maintain awareness of emerging tools and technologies to ensure optimal deployment of Information Security capabilities utilizing best practices.
+ Other duties and responsibilities as determined by Valvoline from time to time at its sole discretion

**What You'll Need to Succeed**

+ Bachelor's degree in information systems, engineering, management, or related field, or 4+ years of equivalent work experience.
+ Minimum four years’ experience working with a SIEM, including log collection, creating and maintaining alerts, reports, and dashboards, is required
+ Minimum two years’ experience in configuring and managing Syslog is required
+ Minimum one year’s experience with ingesting logs via API, including set up, token management, and configuration, is required
+ Preferred experience working with log collection via a data lake.
+ Strong familiarity with the MITRE ATT&CK and DEFENSE frameworks, including translating TTPs into actionable, accurate alerts
+ Experienced with log parsing and ingestion techniques to reduce the amount of data and increase usability before being fed into SIEM
+ Ability to understand and analyze basic operating system logs for Linux and Windows systems
+ SSCP, CISSP, or CCSP are preferred
+ Knowledge of information security principles, including risk assessment and management, threat and vulnerability management, incident response, data protection, and identity and access management.
+ Practical experience working with security-related frameworks such as NIST CSF, NIST 800-53, or COBIT.
+ Experience in developing, documenting, and maintaining security procedures.
+ Strong analytical and problem-solving skills to provide multiple options to risk mitigation and problem resolution.
+ Ability to work well under minimal supervision.
+ Continuous self-learning of emerging security technologies, control frameworks, and best practices.
+ Strong team-oriented interpersonal skills, with the ability to interface effectively with a broad range of people and roles, including vendors and IT-business personnel.
+ Strong written and verbal communication skills.
+ Strong customer/client focus, with the ability to manage expectations appropriately, provide superior customer/client experience and build long-term relationships.
+ Must be authorized to work in the U.S.

**We Take Care of the WHOLE You**

+ Health insurance plans (medical, dental, vision)
+ HSA and flexible spending accounts
+ 401(k)
+ Incentive opportunity*
+ Life insurance
+ Short and long-term disability insurance
+ Paid vacation and holidays*
+ Employee Assistance Program
+ Valvoline Instant Oil Change discounts
+ Tuition reimbursement*
+ Adoption assistance*

_*Terms and conditions apply, and benefits may differ depending on position._

**Your Path to Valvoline**

Valvoline provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

Join us in revolutionizing the automotive aftermarket industry while enjoying competitive benefits, a supportive work culture, and opportunities for advancement.

Apply now and become an integral part of our journey at Valvoline.

The Company endeavors to make its recruitment process accessible to any and all users.

Reasonable accommodations will be provided upon request to applicants with disabilities to facilitate equal opportunity throughout the recruitment and selection process.

Please contact Human Resources at 1.833.VVV.Report or email ECC@valvoline.com to make a request for reasonable accommodation during any aspect of the recruitment and selection process.

The contact information is for accommodation requests only; do not use this contact information to inquire about the status of applications.

#GGL

#LI-Remote

Required Skill Profession

Other General