{"id":110390,"url":"https://alion.io/job/edwards-senior-analyst-siem-automation-information-security","title":"Senior Analyst, SIEM & Automation, Information Security","company":{"id":5220,"name":"Edwards Lifesciences","domain":"edwards.com","url":"https://alion.io/company/edwards","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":78,"open_postings":54,"ghost_share":0.037,"stale_share":0.741,"repost_share":0.074,"time_to_fill_p50_days":28,"computed_at":"2026-10-28T05:59:10Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Pune, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":18000,"max_usd":39000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":11},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon ECS","optional":false},{"name":"Cortex XSOAR","optional":false},{"name":"Fluent Bit","optional":false},{"name":"Fluentd","optional":false},{"name":"Google SecOps","optional":false},{"name":"IAM","optional":false},{"name":"IBM QRadar","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false}],"status":"live","first_seen_at":"2026-06-26T00:00:00Z","employer_posted_date":"2026-06-26","last_verified_at":"2026-10-28T01:21:56Z","board_verified":true,"closed_at":null,"days_open":124,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":124},"description":"Edwards Lifesciences is expanding its global technology capabilities with the launch of a new IT Innovation Hub in Pune, India. The Hub strengthens the technology foundation that supports our business worldwide, working in close partnership with teams across regions to deliver reliable, high-quality solutions at scale.\nDesigned as a long-term investment, the Pune Hub will advance newer digital capabilities such as automation, data, AI, and cloud, and will include roles spanning end user services, application development, and enterprise platform teams.\nTogether, these teams will help Edwards operate more efficiently\nand accelerate innovation in support of our mission of advancing patient care.\nAs an Edwards Sr. Analyst for Information Security, you will contribute with protecting Edwards organization, applications, and products by leading SIEM engineering, managing data pipelines and building automation use cases. Ideal candidates possess knowledge in data source onboarding, writing parsers and SOAR operations. If you have an innovative mindset and a strong desire to address security challenges through scalable automation and SIEM engineering - this role is for you.\nHow will you make an impact:\nLead SIEM engineering: deploy, configure, and continuously optimize the SIEM platform for performance, scalability, and reliable data availability\n\nOwn the SIEM data layer - ingestion, parsing, normalization, and data modeling - ensuring logs are complete, well-structured, and queryable across the platform\n\nDesign, build, and maintain log ingestion pipelines from cloud, on-prem, and SaaS sources into the SIEM platform\n\nWrite and tune field extraction rules, parsers, and normalization logic (regex, Grok, CEF/LEEF, OCSF, ECS)\n\nOnboard new data sources end-to-end: connector configuration, schema mapping, field normalization, and data validation\n\nPartner with detection engineers to ensure data quality and completeness for use-case coverage\n\nManage log volume for cost optimization, and data routing policies (tiering, filtering, sampling)\n\nDesign, build and maintain complexed automation use cases and AI-Agents in Incident Response, IAM, Cloud and Security operations areas\n\nImprove security data pipelines by building innovative automations\n\nStaying informed on the evolving cybersecurity threat landscape to drive innovative SIEM processes and automations to drive Edwards’ security posture\n\nWhat you'll need (Required):\nBachelor's Degree in related field with 5+ years of previous related experience, or equivalent work experience based on Edwards criteria\n\nWhat else we look for:\nPrevious related experience in SIEM management\n\nExpert with Google SecOps or other SIEM solutions (Splunk, Qradar etc)\n\nExpert with security Data Pipeline solutions (Cribl, bindplane, databahn etc) - Preffered\n\nExperience with SOAR platforms operations (Torq, PaloAlto XSOAR etc)\n\nExperience with parser creation and data formatting (regex, Grok, CEF/LEEF, OCSF, ECS)\n\nAbility to evaluate, prioritize and integrate new data sources (OT/ICS, API telemetry)\n\nExpirence with log forwarding technologies (rsyslog, syslog-ng, Fluentd/Fluent Bit, NXLog etc)\n\nCertifications in related discipline preferred (e.g., CEH, CISM, CISSP)\n\nUnderstanding of security concepts in any of the following: IDR, Cloud, IAM and security operations\n\nScripting proficiency: Python or Bash for automation and parser development - Preffered\n\nProficient analytical and problem-solving abilities to identify and mitigate potential security risks\n\nStrict attention to detail\n\nAbility to partner with other information security and IT experts\n\nSubstantial understanding of troubleshooting techniques with the ability to adapt and learn new technologies\n\nAbility to provide guidance to assigned teams on implementing information security solutions\n\nExcellent organization and time management skills\n\nExcellent verbal and written communication skills\n\nRecruiting scam alert: Read our notice about potential recruiting scams.","description_format":"text","description_chars":3996,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","Security Operations","Cardiovascular Devices","Patient Monitoring"],"lifecycle":[{"event":"open","at":"2026-06-26T00:00:00Z"}],"visa":[],"liveness":{"score":9,"band":"cold","label":"Long shot","p_open":1,"p_active":0.314,"p_room":0.28,"age_days":124,"expected_fill_days":28,"reasons":["conf:4","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-28T05:59:10Z"},"pay":null,"html_url":"https://alion.io/job/edwards-senior-analyst-siem-automation-information-security","json_url":"https://alion.io/job/edwards-senior-analyst-siem-automation-information-security.json","meta":{"generated_at":"2026-10-28T12:47:16Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":17078,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-29T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":5220},"rest":"https://alion.io/mcp/rest/get_company?id=5220"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fedwards-senior-analyst-siem-automation-information-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fedwards-senior-analyst-siem-automation-information-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fedwards-senior-analyst-siem-automation-information-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/edwards-senior-analyst-siem-automation-information-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fedwards-senior-analyst-siem-automation-information-security"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":110390}},{"tool":"search_jobs","arguments":{"company":"edwards.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":110390},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}