{"id":3067678,"url":"https://alion.io/job/johnson-controls-security-data-siem-engineer-2","title":"Security Data & SIEM Engineer","company":{"id":448321,"name":"Johnson Controls","domain":"johnsoncontrols.com","url":"https://alion.io/company/johnsoncontrols-3","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":89,"open_postings":763,"ghost_share":0.001,"stale_share":0.633,"repost_share":0.013,"time_to_fill_p50_days":21,"computed_at":"2026-10-23T05:54:15Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":16500,"max_usd":36000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":11},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Carbon Black","optional":false},{"name":"Crowdstrike","optional":false},{"name":"IBM QRadar","optional":false},{"name":"Jira","optional":false},{"name":"Qualys Cloud Platform","optional":false},{"name":"SentinelOne","optional":false},{"name":"ServiceNow","optional":false},{"name":"SIEM","optional":false},{"name":"Sophos","optional":false},{"name":"Splunk","optional":false},{"name":"Kubernetes","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true},{"name":"Windows","optional":true}],"status":"live","first_seen_at":"2026-10-22T08:25:11Z","employer_posted_date":"2026-10-22","last_verified_at":"2026-10-23T07:22:17Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Job description:\nSecurity Data & SIEM Engineer\nJohnson Controls is looking for a Security Data & SIEM Engineer to strengthen security visibility across cloud and enterprise environments. In this role, you will help design, tune, and operate the security logging and SIEM capabilities that support threat detection, investigation, and response.\nRole Overview\nYou will own key parts of the security data pipeline, including log onboarding, normalization, detection content, alert tuning, and integrations with operational workflows. This is a hands-on engineering role for someone who can work across security tooling, incident response, and cross-functional partners to improve the quality and usefulness of security telemetry.\nKey Responsibilities\nConfigure and maintain SIEM content, including log sources, parsing, correlation rules, dashboards, alerts, and reports.\nIngest and normalize security events from cloud, endpoint, network, identity, and application sources.\nTune detections to reduce noise, improve signal quality, and support timely response.\nSupport security tooling across SIEM, vulnerability management, endpoint protection, and CSPM platforms.\nIntegrate security alerts and workflows with ServiceNow, Jira, and related ticketing tools.\nPartner with threat detection, incident response, and platform teams to investigate events and improve coverage.\nMaintain documentation, runbooks, policies, and procedures for security tooling and integrations.\nMonitor tool health and data quality, and troubleshoot issues in ingestion, visibility, and alerting.\nStay current on emerging threats, vulnerabilities, and security best practices.\nMentor team members and share practical guidance on SIEM engineering and data analysis.\nHow You Will Do It\nYou take ownership of security outcomes with accountability, integrity, and a strong focus on safe operations.\nYou stay close to the work, remove friction for your customers, and focus on the logs, detections, and integrations that matter most.\nYou use data, feedback, and root-cause analysis to improve detection quality and make the environment better every day.\nYou collaborate across security, IT, and business teams, sharing knowledge and building trust to win as one team.\nYou validate changes carefully, document your work clearly, and keep support teams informed so the environment remains reliable and easy to operate.\nQualifications\nBachelor's degree in computer science, information security, engineering, or a related field, or equivalent experience.\n5 to 10 years of experience in IT security, security operations, or security engineering.\nHands-on experience with SIEM platforms such as Splunk, QRadar, ArcSight, or Logscale.\nStrong understanding of log management, detection engineering, alert tuning, and security event analysis.\nExperience onboarding and maintaining security telemetry from cloud, endpoint, network, identity, and application sources.\nExperience with vulnerability management tools such as Qualys, Tenable.io, or Rapid7.\nExperience with endpoint protection solutions such as CrowdStrike, Carbon Black, or SentinelOne.\nExperience working with CSPM tools such as Palo Alto Prisma, CrowdStrike CSPM, or Sophos Cloud Optix.\nWorking knowledge of ServiceNow, Jira, or similar ticketing workflows.\nStrong troubleshooting, documentation, and communication skills.\nNice to Have\nPython or PowerShell scripting experience.\nExperience with Kubernetes security or cloud infrastructure security.\nCertifications such as CompTIA Security+, Splunk Certified User, Splunk Certified Power User, GSEC, CISSP, or CISM.\nExperience supporting SOAR or automation workflows.\nFamiliarity with Linux, Windows, or macOS security data sources.","description_format":"text","description_chars":3703,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Security Operations","HVAC & Refrigeration","Access Control & Alarm Systems","Building Automation & Controls"],"lifecycle":[{"event":"open","at":"2026-10-22T08:25:11Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":0,"expected_fill_days":21,"reasons":["conf:3","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-10-23T05:54:15Z"},"pay":null,"html_url":"https://alion.io/job/johnson-controls-security-data-siem-engineer-2","json_url":"https://alion.io/job/johnson-controls-security-data-siem-engineer-2.json","meta":{"generated_at":"2026-10-23T09:57:09Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":15183,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-24T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":448321},"rest":"https://alion.io/mcp/rest/get_company?id=448321"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fjohnson-controls-security-data-siem-engineer-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fjohnson-controls-security-data-siem-engineer-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fjohnson-controls-security-data-siem-engineer-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/johnson-controls-security-data-siem-engineer-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fjohnson-controls-security-data-siem-engineer-2"}]}