Production Support - Cybersecurity

Job Description

We are seeking an experienced Production Support Engineer with a strong cybersecurity background to support critical security and identity management platforms within a highly regulated financial services environment. This role is responsible for the monitoring, administration, troubleshooting, and continuous improvement of SIEM/SOAR solutions, Identity & Access Management (IAM) technologies, and supporting infrastructure. The ideal candidate will have deep hands-on expertise with Splunk, cybersecurity operations, Linux environments, and production support, while serving as a subject matter expert for security incident detection, response, and automation.

Job Responsibilities:

• Provide production support for cybersecurity, IAM, and SIEM/SOAR platforms while meeting established SLA commitments.
• Monitor, analyze, and respond to security events, incidents, and alerts to maintain business continuity.
• Administer, configure, and optimize Splunk environments, including dashboards, searches, alerts, reports
• Develop and enhance threat detection use cases, correlation rules, and incident response workflows.
• Lead incident triage, service restoration, root cause analysis, and coordination of permanent fixes.
• Support Identity & Access Management technologies, including authentication, authorization, MFA, and entitlement management solutions.
• Create automation utilizing scripting and DevOps tools to improve operational efficiency and reduce manual effort.
• Ensure compliance with banking regulations, security standards, and ITIL best practices. Participate in on-call support rotations and provide after-hours support when required

This candidate has to be onsite 3 days a week in Charlotte, NC or Chandler, Arizona. This candidate has to be okay with overtime hours when production support is necessary

Skills and Requirements

• 5+ years of experience supporting SIEM / SOAR platforms in a production environment

• 5+ years of experience with Splunk, including searches, dashboards, alerts and incident investigations

• Hands on experience managing critical production incidents, including monitoring, incident response, triage support, service restoration, root cause analysis, and coordination of corrective actions in accordance with cybersecurity best practices

• Strong expertise within the Identity and Access Management (IAM) domain & Multi-Factor Authentication (MFA) technologies.

• Advanced troubleshooting skills across enterprise applications and infrastructure platforms Hands on experience with Linux

• Experience with Red Hat OpenShift, containers, CI/CD pipelines, GitHub, Jenkins, and Ansible.

• Familiarity with Atlassian Jira, Remedy ITSM, Dynatrace, Horizon, BladeLogic, or Tower.

• Cloud platform experience (AWS, Azure, or GCP).

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to [email protected].