SIEM Engineer (ML/AI Focus)

Job Location

Job Description

Information Technology (IT) at Procter & Gamble is where business, innovation and technology integrate to create a competitive advantage for P&G.  Our mission is clear -- we deliver IT to help P&G win with the over 5 billion consumers we serve worldwide.  Our IT professionals are diverse business leaders who apply IT mastery to deliver game-changing, technology-driven business models and capabilities for our 65 iconic, trusted brands.

From Day 1, you’ll be trusted to dive right in, take the lead, use your initiative, and build billion-dollar brands that help make everyday activities easier and make the world a better place. You’ll be doing meaningful work that takes your career places you never imagined. And you’ll do this in creative workspaces where new ideas flourish and where your technical mastery is recognized and rewarded.

The Opportunity

Procter & Gamble is seeking an experienced SIEM Engineer to join our engineering organization.  In this role you will play a vital role in the InfoSec's Cyber Defense Technology team, focusing on enhancing the organization's detection and alerting capabilities through the effective utilization of data. This role is responsible for leveraging ML/AI expertise to optimize the usage of data and drive improvements in the Logging, Monitoring, and Alerting (LMA) service.

As a SIEM Engineer, you will collaborate with various stakeholders to understand business requirements and devise strategies for utilizing data in a more effective and efficient manner. You will work closely with the Security Operations Center (SOC) team, assisting in the implementation and management of SIEM and SOAR technologies, while also focusing on leveraging ML/AI techniques to enhance threat detection and analysis.

Position Responsibilities

• Utilize expertise in Machine Learning (ML) and Artificial Intelligence (AI) along with a strong background in SIEM to enhance the detection and alerting capabilities of the Information Security department.
• Collaborate with stakeholders to identify and understand business requirements and provide recommendations on how to leverage data effectively.
• Design, develop, and implement ML/AI algorithms and models to analyze security event data and improve the accuracy of threat detection.
• Utilize ML/AI techniques to identify patterns, anomalies, and potential security threats within large datasets.
• Work closely with the Security Operations Center (SOC) team to identify opportunities for automation and process improvement, leveraging ML/AI technologies.
• Assist in the evaluation, selection, and implementation of ML/AI tools and platforms that can enhance the effectiveness of the SIEM system.
• Collaborate with data engineers and data scientists to ensure the availability and quality of data required for ML/AI-driven security analysis.
• Conduct research and stay updated on the latest trends and advancements in ML/AI for security analytics.
• Develop and maintain documentation related to ML/AI models, algorithms, and processes implemented within the SIEM system.
• Collaborate with cross-functional teams to integrate ML/AI capabilities into other security systems and processes.
• Provide expertise and guidance on ML/AI best practices and methodologies to the broader security team.
• Stay informed about regulatory and compliance requirements related to ML/AI usage in the security domain.

The Ideal Candidate

• Is passionate about cyber security and improving infrastructure for the future.
• Can work independently and as a team to gather requirements and translate into solutions.
• Is detail-oriented and analytical in nature, with strong problem-solving skills.
• Has the ability to multitask and prioritize, work on multiple projects and manage time effectively.
• Can produce and present technical information to both technical and non-technical personnel.
• Can provide customer-facing support in a professional manner.

Job Qualifications

Required:

• Bachelor's Degree in Information Systems, Information Technology (IT), Computer Science, Software Engineering, other STEM field or 7+ years relevant years of experience/education

• Medium to advanced understanding of logging and monitoring technology, including but not limited to SIEM, SOAR, Kafka, Apache Nifi, Cloud Native analytics and Storage service, etc.
• Proficiency in programming languages commonly used in ML/AI, such as Python or R.
• Experience with data preprocessing, feature engineering, and data visualization techniques.
• Demonstrated experience in applying ML/AI techniques and algorithms to security analytics
• Strong background and experience in Security Information and E