Splunk SIEM Engineer II at USPI

Austin, Texas, United States -

Full Time

Start Date

Immediate

Expiry Date

10 Jun, 26

Salary

0.0

Posted On

12 Mar, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Splunk SIEM, SIEM Administration, Security Vulnerability Evaluations, Use Case Setup, Log Onboarding, Dashboards, Alerts, NERC CIP, Vulnerability Scans, Log Analysis, Linux, Cyber Security, EMS, SCADA

Industry

Description

If you're looking for an opportunity to work in a true work-life balanced environment, then look no further. LCRA's Energy Management System (EMS) Team is hiring for an intermediately experienced SIEM Engineer to join their upbeat and skilled team in Austin, TX. Your skills will be part of a high-reaching team dedicated to configuring and coordinating our Splunk SIEM that helps monitor and protect our most critical system from all cyber threats. At LCRA, we currently offer a hybrid working schedule with two days in the office and three days working remote. You will be trusted to: - Responsible for administering, configuring and maintaining sophisticated SIEM systems, both backend and frontend in the EMS and SUBWAN environments. - Performs security vulnerability evaluations and applies system updates, if applicable. - Responsible for setting up use cases, on-boarding logs, dashboards, and alerts on SIEM to support business and NERC CIP needs. - Coordinates with other teams annually or on-demand perform nmap, vulnerability scans against the system. - Proactively monitors, analyzes, and reviews security related log and SIEM alerts from multi-platform EMS computing environment and work with all interested parties to ensure all cyber security related cases will be looked after and addressed. - Researches, analyzes, and implements software patches or hardware changes to fix any SIEM deficiencies. You qualify with: - Six or more years of experience in technical field, computer science, engineering, network systems or other relevant experience. A degree(s) in computer science, information technology, telecommunications, engineering, or relevant field may be substituted per LCRA guidelines for certain years of experience. You are a great fit with: - SIEM admin certified - Linux Intermediate Level - Knowledge of Cyber Security and experience in using SIEM to monitor and set up alerts for security related events - Knowledge of EMS/Supervisory Control and Data Acquisition (SCADA) applications or prior experience in a critically important controls environment - Prior work experience in the NERC CIP supervised environment You gain: - Competitive salary & medical, dental, vision and legal insurance - Paid time off, including time for vacation, sick and family care leave - 401(k) match up to 8% that includes a student loan 401(k) contribution program option - Life and disability insurance - Wellness program including wellness incentive - Extensive learning & development programs And more - all to create a compelling and rewarding work environment. Equal Opportunity Employer LCRA provides equal employment opportunities and a work environment free of discrimination and harassment. All employment decisions at LCRA are based on business need, job requirement and individual qualifications, without regard to race, color, religion, gender identity, national origin, age, disability, sexual orientation, genetic information, or veteran status in accordance with applicable federal and state legal requirements governing nondiscrimination in employment. LCRA is committed to working with and providing reasonable accommodations to job applicants with physical or mental disabilities. Applicants with a disability who require a reasonable accommodation for any part of the application or hiring process can contact LCRA Human Resources (512) 578-4004 or email lcra.benefits@lcra.org [lcra.benefits@lcra.org]. Reasonable accommodations will be determined on a case-by-case basis.

Responsibilities

The engineer will be responsible for administering, configuring, and maintaining sophisticated SIEM systems across backend and frontend environments, including performing security vulnerability evaluations and applying necessary system updates. Key duties involve setting up use cases, onboarding logs, creating dashboards, and configuring alerts to support business and NERC CIP compliance needs.