NorthMark Strategies

Cyber Defense Engineer - SIEM

New York, NY

No sponsorshipDetected 21 days ago

PythonPowerShellAPI DevelopmentMachine LearningCybersecuritySIEMMicrosoft DefenderKQLSOARUEBASOC OperationsDetection EngineeringIncident Response

About the role

The Cyber Defense Engineer - SIEM reports to the Director of Cyber Defense and operates within the Office of the CISO.
This position places a strong emphasis on AI-driven security engineering, including the development of intelligent detection systems, automation pipelines, and data-driven defense mechanisms.
The ideal candidate will combine deep expertise in the Microsoft security ecosystem with experience leveraging artificial intelligence and machine learning to improve SIEM/SOAR performance, detection fidelity, and operational efficiency.

Design, develop, and deploy AI-enhanced detections and automations within the SIEM/SOAR platform to improve signal-to-noise ratio and reduce alert fatigue.
Engineer and optimize SIEM pipelines using AI/ML techniques for anomaly detection, behavioral analytics, and threat correlation.
Integrate SIEM with security tools and data sources to build a context-rich, intelligence-driven monitoring ecosystem.
Develop and implement AI-assisted threat detection models, including user/entity behavior analytics (UEBA) and predictive analytics.
Collaborate with cyber defense operations to identify emerging threats and capability gaps, leveraging AI to proactively strengthen defenses.
Build and maintain automated response orchestration and intelligent playbooks that adapt based on threat context.
Design automation for alert enrichment, triage, and response using both rule-based and AI-assisted decisioning frameworks.
Partner with IT and engineering teams to ensure comprehensive telemetry collection and high-quality data pipelines.
Support SOC operations by enhancing detection engineering, incident response workflows, and operational metrics through AI augmentation.
You will collaborate across IT and security teams to design scalable logging, enrichment, and response architectures, while continuously advancing the organization's AI-enabled SIEM engineering maturity.

Bachelor's degree in computer science, Information Security, or a related field.
4-6+ years of experience in cybersecurity engineering, SOC engineering, or insider threat.
Demonstrated expertise in SIEM engineering and security monitoring at scale.
Strong understanding of the Microsoft security stack (e.g., Sentinel, Defender suite)
Proficiency with automation tooling and scripting languages (KQL, Python, Powershell)
Proficiency in API development with the goal of integrating security tooling
Familiarity with various log ingestion methodologies into a SIEM environment.
Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.

Medical insurance in our PPO plan and a variety of other benefits such as Health Savings Accounts (with Company Contribution!), Flexible Spending Accounts, Supplemental Life Insurance, Wellhub and more.
Company-Paid Lunch Stipend: Lunch is provided via GrubHub
Time Off: 25 days of Paid Time Off plus 12 company holidays

NORTHMARK STRATEGIES LLC IS AN EQUAL EMPLOYMENT OPPORTUNITY EMPLOYER.
THE COMPANY'S POLICY IS NOT TO DISCRIMINATE AGAINST ANY APPLICANT OR EMPLOYEE BASED ON RACE, COLOR, RELIGION, NATIONAL ORIGIN, GENDER, AGE, SEXUAL ORIENTATION, GENDER IDENTITY OR EXPRESSION, MARITAL STATUS, MENTAL OR PHYSICAL DISABILITY, AND GENETIC INFORMATION, OR ANY OTHER BASIS PROTECTED BY APPLICABLE LAW.
THE FIRM ALSO PROHIBITS HARASSMENT OF APPLICANTS OR EMPLOYEES BASED ON ANY OF THESE PROTECTED CATEGORIES.

Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.

This listing is sourced directly from NorthMark Strategies's careers page and normalized into a canonical job model.