Senior Systems Engineer I (Cybersecurity Engineer - SIEM)

Company Description

At Nielsen, we are passionate about our work to power a better media future for all people by providing powerful insights that drive client decisions and deliver extraordinary results. Our talented, global workforce is dedicated to capturing audience engagement with content - wherever and whenever it’s consumed. Together, we are proudly rooted in our deep legacy as we stand at the forefront of the media revolution. When you join Nielsen, you will join a dynamic team committed to excellence, perseverance, and the ambition to make an impact together. We champion you, because when you succeed, we do too. We enable your best to power our future.

Job Description

- Responsible for the design, build, configuration and maintenance for internal cybersecurity functions including: SIEM, monitoring, technology integrations, infrastructure & configuration as code, and ETL.

- Provide cybersecurity guidance on the strategy, implementation, and maintenance of technologies including but not limited to: SIEM, SOAR, and UBA.

- Utilize SIEM to ingest, enrich, and tune data that will provide value to the Cybersecurity Incident Response team.

- Discover opportunities and implement automation to drive efficiencies across technologies and processes within cybersecurity engineering, incident response, and threat intelligence.

- Collaborate with stakeholders within the cybersecurity team to develop dashboards, reports, alerts, and tools to meet requirements.

- Collaborate with technology teams to ensure systems and services are appropriately configured for monitoring, alerting, and reporting.

- Report, investigate when appropriate, and recommend corrective actions for cybersecurity incidents.

- Advise incident responders on actions necessary to investigate and resolve cybersecurity incidents.

- Remain current on cybersecurity technology, vulnerabilities, attacks, and countermeasures.

- Review performance, availability, and capacity metrics of internally and externally hosted services and service components to compare with service agreements.

- Troubleshoot escalated cybersecurity endpoint, data, and network problems.

- Plan, implement, manage, monitor, and upgrade cybersecurity measures to protect enterprise data and infrastructure.