SIEM Engineer

Job Requisition ID #

25WD92686

Position Overview

Autodesk is seeking a highly skilled SIEM Engineer to manage and enhance our SIEM platform. This role involves working closely with the SOC, Detection Engineers, Threat Hunters, Security Logging, and SOAR teams to develop, evolve, and fine-tune detections, alerts, and other SIEM configurations to protect Autodesk's platforms.

Responsibilities:

• Perform administrative and support duties for the SIEM platform, providing critical services for the protection and defense of Autodesk
• Conduct detection engineering to meet intelligence requirements for advanced threats
• Maintain and improve logging and detection roadmaps for continuous innovation
• Research, document, and develop threat detections based on behavioral attributes of actors, malware operators, and general threats to Autodesk interests
• Provide expert recommendations to enhance data onboarding and ingestion normalization
• Foster a transparent and collaborative team culture, emphasizing listening and recognition of team members at all levels

• 5+ years of experience in threat hunting, incident response, security engineering, SIEM engineering, or detection engineering roles
• Hands-on experience in applying unified data models to log/data sources (e.g. AWS, Azure, AD, DNS, proxy, FW, EDR, webservers) to support detection engineering
• Excellent written and verbal communication skills in English
• Passion for security automation and a solid understanding of security incident response
• Strong proficiency in logging and threat data engineering and analysis
• Knowledge of security frameworks such as MITRE ATT&CK and NIST

• Certifications: (e.g., GCIH, GREM, GCTI, Security+)
• 1-3 years of experience in threat detection engineering and/or threat hunting, focusing on implementing and sustaining structured hunt operations
• 1-3 years of experience developing and maintaining security application integrations through APIs in Python or an equivalent scripting language
• Certified Splunk Power User, either Splunk Enterprise Security or Splunk Cloud Admin, and/or Datadog's Log Management Fundamentals
• Education: BA/BS in computer science, information security, or a related field, or equivalent experience