{"id":2098875,"url":"https://alion.io/job/mattel-sr-it-security-analyst-siem-detection-engineering","title":"Sr IT Security Analyst-SIEM Detection Engineering","company":{"id":13477,"name":"Mattel","domain":"mattel.com","url":"https://alion.io/company/mattel-inc","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SmartRecruiters","truth_index":{"grade":"B","score":75,"open_postings":9,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":23,"computed_at":"2026-10-12T06:55:09Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Hyderabad, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":17000,"max_usd":39000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":9},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Cortex XSOAR","optional":false},{"name":"Crowdstrike","optional":false},{"name":"GCP","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"MITRE D3FEND","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false}],"status":"live","first_seen_at":"2026-10-08T15:48:42Z","employer_posted_date":"2026-10-08","last_verified_at":"2026-10-12T22:56:05Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"CREATIVITY IS OUR SUPERPOWER. It’s our heritage and it’s also our future. Because we don’t just make toys. We create innovative products and experiences that inspire fans, entertain audiences and develop children through play. Mattel is at its best when every member of our team feels respected, included, and heard-when everyone can show up as themselves and do their best work every day. We value and share an infinite range of ideas and voices that evolve and broaden our perspectives with a reach that extends into all our brands, partners, and suppliers.\n Job Description\nThe Senior Security Engineer - SIEM & detecting Engineering is responsible for designing, implementing, and optimizing Mattel’s SIEM, NDR, and XDR ecosystems to ensure comprehensive global detection and response coverage. This role requires deep expertise in security telemetry, log management, and detection engineering, with hands-on experience developing scalable analytics, alerts, and integrations that strengthen detection posture, accelerate response, and enhance operational efficiency.\nRoles and Responsibilities\nArchitect, implement, and maintain SIEM infrastructure to ensure reliable log ingestion, parsing, correlation, and alerting across enterprise systems.\n\nDevelop and fine-tune detection content and analytics rules to identify suspicious or malicious activity across endpoints, networks, and cloud environments.\n\nManage and enhance Network Detection and Response (NDR) and Extended Detection and Response (XDR) platforms, integrating telemetry for end-to-end visibility.\n\nPartner with the SOC and Incident Response teams to improve alert fidelity, reduce false positives, and accelerate investigation workflows.\n\nIntegrate SIEM with SOAR and automation pipelines to support rapid response and consistent case handling.\n\nCollaborate with infrastructure and application teams to ensure comprehensive log coverage and compliance with data retention and privacy requirements.\n\nDevelop and maintain dashboards, metrics, and reporting to measure detection performance and operational efficiency.\n\nConduct periodic health checks, tuning, and performance optimization for SIEM and NDR solutions.\n\nMaintain detailed documentation, playbooks, and SOPs supporting SIEM and NDR operations.\n\nSkills and Qualifications\nRequired:\n5-8 years of experience in security engineering, detection engineering, or SOC architecture in an enterprise environment.\n\nExpert-level knowledge of SIEM platforms (e.g., Splunk, XSOAR, or equivalent), including onboarding, parsing, rule creation, and optimization.\n\nStrong understanding of detection engineering, including attack chain mapping, MITRE ATT&CK coverage, and event correlation.\n\nExperience with log source onboarding (firewalls, proxies, endpoints, cloud, identity, email systems etc.).\n\nFamiliarity with SOAR tools and automation workflows for triage and enrichment.\n\nStrong scripting skills (Python, PowerShell, or Bash) for rule automation, parsing, and enrichment.\n\nUnderstanding of cloud detection engineering across Azure, AWS, or GCP environments.\n\nExcellent analytical, problem-solving, and communication skills, with a focus on collaboration and data-driven decision-making.\n\nSIEM engineering and administration (Splunk, Sentinel, etc.)\n\nLog collection, parsing, and correlation logic development\n\nNDR/XDR deployment and tuning (e.g., ExtraHop, Vectra, Cisco, CrowdStrike, or similar)\n\nDetection engineering and content lifecycle management\n\nCloud detection coverage (Azure, AWS, GCP)\n\nScripting and automation (Python, PowerShell, Bash)\n\nSOAR integration for alert enrichment and response automation\n\nData normalization, threat hunting, and query development\n\nFamiliarity with the MITRE ATT&CK and D3FEND frameworks\n\nNetwork security, endpoint telemetry, and identity-based detection techniques\n\nPreferred:\nBachelor’s degree in Cybersecurity, Computer Science, or related technical field, or equivalent professional experience.\n\nDemonstrated success designing, scaling, and maintaining enterprise SIEM and detection systems.\n\nCertifications such as GIAC Certified Detection Analyst (GCDA), GIAC Security Operations Certified (GSOC), CompTIA CySA+, ISC2 SSCP, Splunk Enterprise Security Certified Admin or Architect, or equivalent detection engineering or SIEM certification\n\nAnalytical and detail-oriented with a focus on precision and reliability\n\nStrong communication and collaboration across technical and non-technical stakeholders\n\nAdaptable and proactive in a fast-paced, global environment\n\nPassion for continuous learning, innovation, and automation in security operations\n\nEffective mentor and team contributor\n\nShift Timing:\nWork hours may vary, and the position may require availability during off-business hours as dictated by project needs, system changes, or security events.\nDon’t meet every single requirement? At Mattel, we are dedicated to an inclusive workplace and a culture of belonging. If you’re excited about this role but your past experience doesn’t align perfectly with every qualification in the job description, we still encourage you to apply. You may be just the right candidate for this or other roles.\nHow We Work:\nWe are a purpose driven company aiming to empower generations to explore the wonder of childhood and reach their full potential. We live up to our purpose employing the following behaviors:\nWe collaborate: Being a part of Mattel means being part of one team with shared values and common goals. Every person counts and working closely together always brings better results. Partnership is our process and our collective capabilities is our superpower.\nWe innovate: At Mattel we always aim to find new and better ways to create innovative products and experiences. No matter where you work in the organization, you can always make a difference and have real impact. We welcome new ideas and value new initiatives that challenge conventional thinking.\nWe execute: We are a performance-driven company. We strive for excellence and are focused on pursuing best-in-class outcomes. We believe in accountability and ownership and know that our people are at their best when they are empowered to create and deliver results.\nOur Approach to Flexible Work:\nWe embrace a flexible work model designed to empower a culture of growth, optimism, and wellbeing, where every employee can reach their full potential. Combining purposeful in-person collaboration with flexibility, our focus is to optimize performance and drive connection for moments that matter.\nWho We Are:\nMattel is a leading global toy and family entertainment company and owner of one of the most iconic brand portfolios in the world. We engage consumers and fans through our franchise brands, including Barbie, Hot Wheels, Fisher-Price, American Girl, Thomas & Friends, UNO, Masters of the Universe, Matchbox, Monster High, MEGA and Polly Pocket, as well as other popular properties that we own or license in partnership with global entertainment companies. Our offerings include toys, content, consumer products, digital and live experiences. Our products are sold in collaboration with the world’s leading retail and ecommerce companies. Since its founding in 1945, Mattel is proud to be a trusted partner in empowering generations to explore the wonder of childhood and reach their full potential.\nMattel’s award-winning workplace culture has been recognized by Forbes, Fast Company, Newsweek, Great Place to Work, TIME, and more.\nVisit us at https://jobs.mattel.com/ and www.instagram.com/MattelCareers.\nMattel is an Equal Opportunity Employer where we want you to bring your authentic self to work every day. We welcome all job seekers, and all applicants will receive consideration for employment.\nVideos to watch:\nThe Culture at Mattel\nCorporate Philanthropy","description_format":"text","description_chars":7803,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":["Continuous learning","Flexible schedule"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Security Operations","Toys, Games & Puzzles"],"lifecycle":[{"event":"open","at":"2026-10-08T17:44:01Z"}],"visa":[],"liveness":{"score":89,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.894,"p_room":1,"age_days":3,"expected_fill_days":23,"reasons":["conf:0","velocity","win:early","comp:brand"],"computed_at":"2026-10-12T06:55:09Z"},"pay":null,"html_url":"https://alion.io/job/mattel-sr-it-security-analyst-siem-detection-engineering","json_url":"https://alion.io/job/mattel-sr-it-security-analyst-siem-detection-engineering.json","meta":{"generated_at":"2026-10-13T00:14:11Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":338,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":13477},"rest":"https://alion.io/mcp/rest/get_company?id=13477"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmattel-sr-it-security-analyst-siem-detection-engineering"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmattel-sr-it-security-analyst-siem-detection-engineering"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmattel-sr-it-security-analyst-siem-detection-engineering"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/mattel-sr-it-security-analyst-siem-detection-engineering\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmattel-sr-it-security-analyst-siem-detection-engineering"}]}