SIEM Engineer

p b Role Description /b /p p At FNZ, our purpose is to make wealth management more accessible, bringing easier, fairer and more inclusive solutions to people worldwide. Here in the b Global Information Security /b team, we work to protect the platforms that support investment solutions for over 20 million people. /p p We are looking for an experienced b SIEM Engineer /b , reporting to the b Cyber Security Engineering Manager (SIEM). /b You will have a strong background in designing and developing monitoring solutions and will be familiar with onboarding data from varied sources. You will have strong experience of different SIEM architectures and be adaptable in your approach. Your role in FNZ will be to manage and enhance the SIEM solutions for the FNZ Group, supporting the lifecycle of data onboarding, use cases and automating responses. /p p b Specific Role Responsibilities /b /p ul li Support the creation and delivery of the roadmap and architecture for the SIEM solutions

in FNZ. /li li Deploy, manage and enhance the SIEM technology in FNZ ul li Managing the SIEM infrastructure /li li Log onboarding /li li Rules and Use case development /li li Schema management /li li Threat Intelligence integration /li /ul /li li Maintain up-to-date knowledge of emerging security threats and trends and build this into the SIEM strategy. /li li Support the Incident Response team in FNZ to identify, manage and respond to incidents. /li li Collaborate effectively with cross-functional teams across different time zones. /li /ul p b Experience Required /b /p p b Primary Requirements /b /p ul li Significant (4+ years) experience of design/administering/managing SIEM (Splunk/Sentinel) in a large, distributed environment. /li li Strong experience with Microsoft Sentinel administration. /li li Experience with Splunk Enterprise Security administration. /li li Significant experience in the creation of rules and use cases to support business incident
response. /li li Strong experience in data onboarding and schema management. /li li Strong understanding of multiple technologies: ul li Windows /li li Linux /li li Network devices (WAF, Firewalls, Switches) /li li Cloud /li li Application Logging /li /ul /li li Advanced automation and scripting capabilities, with hands-on knowledge of development best practices. /li li Knowledge of Security Frameworks (NIST, MITRE etc). /li li Relevant security certifications (e.g., SSCP, Vendor Certifications). /li li Experience of working with tools like Jira, Planner and Confluence. /li /ul