Production Support - Cybersecurity

We are seeking an experienced Production Support Engineer with a strong cybersecurity background to support critical security and identity management platforms within a highly regulated financial services environment. This role is responsible for the monitoring, administration, troubleshooting, and continuous improvement of SIEM/SOAR solutions, Identity & Access Management (IAM) technologies, and supporting infrastructure. The ideal candidate will have deep hands-on expertise with Splunk, cybersecurity operations, Linux environments, and production support, while serving as a subject matter expert for security incident detection, response, and automation., * Provide production support for cybersecurity, IAM, and SIEM/SOAR platforms while meeting established SLA commitments.

• Monitor, analyze, and respond to security events, incidents, and alerts to maintain business continuity.
• Administer, configure, and optimize Splunk environments, including dashboards, searches, alerts, reports
• Develop and enhance threat detection use cases, correlation rules, and incident response workflows.
• Lead incident triage, service restoration, root cause analysis, and coordination of permanent fixes.
• Support Identity & Access Management technologies, including authentication, authorization, MFA, and entitlement management solutions.
• Create automation utilizing scripting and DevOps tools to improve operational efficiency and reduce manual effort.
• Ensure compliance with banking regulations, security standards, and ITIL best practices. Participate in on-call support rotations and provide after-hours support when required

This candidate has to be onsite 3 days a week in Charlotte, NC or Chandler, Arizona. This candidate has to be okay with overtime hours when production support is necessary

• 5+ years of experience supporting SIEM / SOAR platforms in a production environment
• 5+ years of experience with Splunk, including searches, dashboards, alerts and incident investigations
• Hands on experience managing critical production incidents, including monitoring, incident response, triage support, service restoration, root cause analysis, and coordination of corrective actions in accordance with cybersecurity best practices
• Strong expertise within the Identity and Access Management (IAM) domain & Multi-Factor Authentication (MFA) technologies.
• Advanced troubleshooting skills across enterprise applications and infrastructure platforms Hands on experience with Linux

NICE TO HAVE SKILLS AND EXPERIENCE

• Experience with Red Hat OpenShift, containers, CI/CD pipelines, GitHub, Jenkins, and Ansible.
• Familiarity with Atlassian Jira, Remedy ITSM, Dynatrace, Horizon, BladeLogic, or Tower.
• Cloud platform experience (AWS, Azure, or GCP).