{"id":3540607,"url":"https://alion.io/job/depository-trust-clearing-corporation-senior-siem-engineer","title":"Senior SIEM Engineer","company":{"id":1759477,"name":"Depository Trust & Clearing Corporation","domain":"dtcc.com","url":"https://alion.io/company/dtcc-com","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"B","score":78,"open_postings":84,"ghost_share":0,"stale_share":0.845,"repost_share":0.036,"time_to_fill_p50_days":35,"computed_at":"2026-11-03T05:54:40Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Tampa, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":100000,"max_usd":192000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":1385},"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Bash","optional":false},{"name":"DNS","optional":false},{"name":"GCP","optional":false},{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"SIEM","optional":false},{"name":"TCP/IP","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-10-30T16:40:42Z","employer_posted_date":"2026-10-30","last_verified_at":"2026-11-03T06:04:39Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"Are you ready to make an impact at DTCC?\nDo you want to work on innovative projects, collaborate with a dynamic and supportive team, and receive investment in your professional development? At DTCC, we are at the forefront of innovation in the financial markets. We are committed to helping our employees grow and succeed. We believe that you have the skills and drive to make a real impact. We foster a thriving internal community and are committed to creating a workplace that looks like the world that we serve.\nThe Information Technology group delivers secure, reliable technology solutions that enable DTCC to be the trusted infrastructure of the global capital markets. The team delivers high-quality information through activities that include development of essential, building infrastructure capabilities to meet client needs and implementing data standards and governance.\nPay and Benefits:\nCompetitive compensation, including base pay and annual incentive\nComprehensive health and life insurance and well-being benefits, based on location\nPension / Retirement benefits\nPaid Time Off and Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.\nDTCC offers a flexible/hybrid model of 3 days onsite and 2 days remote (onsite Tuesdays, Wednesdays and a third day unique to each team or employee).\nThe Impact you will have in this role:\nBeing a member of CISO team, this position will be reporting to the Associate Director, Cyber Threat Defense and Controls within Cybersecurity Engineering & Operations team. The Senior SIEM Engineer will be responsible for the day-to-day decisioning and implementation of the vision of the SIEM roadmap. SIEM includes security logging and monitoring, logging platforms, database activity monitoring, behavior analytics, security orchestration (SOAR), intrusion detection/prevention systems, and incident response capabilities. The Cybersecurity Services (CS) domain within Information Technology is focused on protecting DTCC from cybersecurity risks through world class cyber risk management, talent and governance practices. Cybersecurity Engineering is responsible for providing best in class security services to the enterprise specifically to Security Information Event Management, Vulnerability Management, Identity Access Management, Cloud Security, Network Security, etc.\nYour Primary Responsibilities:\nIdentify, assess, and document security logging and monitoring control gaps, and implement engineering solutions to address identified risks.\nEngineer coverage-monitoring and reconciliation capabilities to identify missing or unhealthy log sources, and partner with platform owners to investigate and remediate gaps.\nDesign, implement, configure, and maintain SIEM platforms and ingestion components to support reliable collection and normalization of security telemetry across on-premises and cloud environments.\nOnboard new log sources by configuring collectors, connectors, and data feeds; developing or updating parsers; and validating end-to-end ingestion against agreed requirements.\nDevelop and maintain data-quality checks for log completeness, timeliness, parsing accuracy, and required fields, and troubleshooting issues affecting the usability of security telemetry.\nImplement and maintain Central Log Management infrastructure and pipelines to support scalable, resilient collection, routing, storage, and retrieval of log and telemetry data.\nTune ingestion pipelines, storage, search performance, and retention configurations to balance platform capacity, reliability, and cost with approved requirements.\nMaintain platform health and security through monitoring, troubleshooting, upgrades, patching, access-control configuration, and change management in line with organizational and regulatory requirements.\nDevelop scripts, integrations, and automation to streamline log onboarding, coverage reconciliation, data-quality validation, and platform health monitoring.\nSupport disaster recovery planning and exercises by validating recovery procedures, platform availability, and restoration of log ingestion.\nSupport audits and regulatory assessments by providing technical evidence, documenting control configurations, and implementing assigned remediation actions.\nCollaborate with operations, security monitoring teams, infrastructure and application owners, and vendors to translate monitoring requirements into technical solutions and resolve integration issues.\nMaintain engineering designs, configuration records, implementation procedures, and support runbooks to enable consistent delivery and effective operational handover.\nDevelop and maintain dashboards and technical metrics for ingestion health, coverage, data quality, and capacity, and communicate engineering progress, risks, and dependencies to stakeholders.\nInvestigate ingestion failures and platform issues, perform root-cause analysis, implement fixes within the Cyber Observability Engineering’s managed systems, and coordinate source-side remediation with the accountable IT owners.\nDeliver assigned engineering tasks for platform implementations, migrations, and enhancements, including testing, deployment validation, and transition to operational support.\nContribute to Cyber Observability Engineering standards, continuous improvement initiatives, and other assigned security observability responsibilities.\nNOTE: The Primary Responsibilities of this role are not limited to the details above.*\nQualifications:\nMinimum of 6 years of related experience\nBachelor's degree preferred and/or equivalent experience\nTalents Needed for Success:\nHands-on experience engineering SIEM and Central Log Management platforms, including collectors, connectors, ingestion pipelines, parsers, normalization, and security telemetry integration.\nAbility to deliver engineering tasks as part of a collaborative team, troubleshoot technical issues, and work with operations, platform owners, and vendors through testing, deployment, and operational handover.\nDemonstrable cybersecurity engineering experience in solution design, configuration, implementation, technical documentation, and validation of log coverage, data quality, platform health, and resilience.\nKnowledge of information security frameworks, control requirements, least-privilege access, change management, and audit evidence relevant to security logging and monitoring.\nWorking knowledge of Linux and Windows systems, databases, networking protocols, and security infrastructure, including TCP/IP, HTTP/HTTPS, DNS, syslog, firewalls, proxies, and IDS/IPS.\nProficiency in scripting and automation using Python, PowerShell, or Bash, with experience integrating REST APIs, processing JSON, using regular expressions, and maintaining code in version control.\nWorking knowledge of cloud security in GCP, Azure, or AWS, including shared responsibility, IAM, service accounts, encryption and key management, network controls, cloud audit logging, and secure integration of cloud telemetry with SIEM platforms.\nFamiliarity with AI and generative AI tools for engineering automation, code assistance, log analysis, and documentation, including validation of generated outputs and use of approved tools with appropriate data protection and human review.\nAwareness of AI security risks and safeguards, including prompt injection, sensitive-data exposure, access controls, and logging and monitoring of AI-enabled services.\nRelevant security, cloud security, or SIEM platform certifications, such as CEH, CCSP, CISSP, OSCP, or cloud-provider security certifications, are a plus.\nThe salary range is indicative for roles at the same level within DTCC across all US locations. Actual salary is determined based on the role, location, individual experience, skills, and other considerations. We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.","description_format":"text","description_chars":8390,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":["Life insurance","Professional development"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Security Operations","Stock Exchanges & Market Infrastructure","Custody & Fund Administration"],"lifecycle":[{"event":"open","at":"2026-10-30T19:05:46Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":3,"expected_fill_days":35,"reasons":["conf:4","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-11-03T05:54:40Z"},"pay":null,"html_url":"https://alion.io/job/depository-trust-clearing-corporation-senior-siem-engineer","json_url":"https://alion.io/job/depository-trust-clearing-corporation-senior-siem-engineer.json","meta":{"generated_at":"2026-11-03T10:29:19Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14558,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1759477},"rest":"https://alion.io/mcp/rest/get_company?id=1759477"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdepository-trust-clearing-corporation-senior-siem-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdepository-trust-clearing-corporation-senior-siem-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdepository-trust-clearing-corporation-senior-siem-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/depository-trust-clearing-corporation-senior-siem-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdepository-trust-clearing-corporation-senior-siem-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3540607}},{"tool":"search_jobs","arguments":{"company":"dtcc.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3540607},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}