Security Platform Administrator (SIEM)

Security Platform Administrator (SIEM): Become the Newest Member of the VF Family  

Now that you’ve found the job description, what’s next?

At VF, we strive to foster a culture of belonging based on respect, connection, openness, and authenticity.  As a purpose-led, performance-driven company, we are committed to inclusion, diversity, equity, and action. So, before we get to the job details, take a minute to learn a little more about us – our values and our culture - visit VF Careers or www.vfc.com.

What will you do?

A day in the life of a Security Platform Administrator at VF looks a little like this.

The Security Operations team is looking for a Security Platform Administrator who will play a vital role in keeping the VF Global Enterprise safe from cyber-attacks. As the Security Platform Administrator, you will be part of a bigger machine working to protect the company from any malicious activity. This role requires you to work with others to strategize threat prevention, coordinate remediations, and contribute to process improvement. 

Let’s break it down a little more.   

• Primary resource for supporting and managing security platforms deployed across the organization with a focus on SIEM and SOAR technologies 

• Responsible for the future state of SIEM and SOAR platforms 

• Oversee daily administration tasks such as maintaining a version status for all deployed products and policies, including the staging and execution of minor platform upgrades  

• Create and maintain all documentation, including Administrative and Operational Runbooks 

• Ensure the health and status of all log sources and integrations  

• Utilize telemetry from security platforms to proactively identify potential issues throughout the enterprise 

• Assist with any transitional activities between existing and future SIEM and SOAR platforms 

• Promote automation and process improvement efforts across the various functions within Security and the larger Digital Technology organization.  

• Recommend best practices and look for opportunities to improve while balancing operational and business risk  

• Integrate SIEM and SOAR with other systems and platforms to enhance overall security posture. 

• Development and maintenance of metrics and dashboards 

• Collaborate with SOC and CIITH teams to fine-tune rules and playbooks to reduce false positives 

• Support compliance with industry standards and regulations 

• Provide training and support to security operations on SIEM/SOAR platforms and processes 

• Participate in after-hours support as needed 

What do you need to succeed?

We all have unique skills that we bring to work and celebrate every day. For this role, there are foundation skills you’ll need to succeed and excel. Additionally, while formal education in a related field is great to have, we are most interested in your 5+ years of experience and professional achievements.

Years of Related Professional Experience: 5+ years 

Position Requirements: 

• Ability to manage all aspects of SIEM and SOAR solutions. Experience in Microsoft Sentinel, IBM QRoC, and IBM Resilient is a plus. 

• Experience with scripting and automation using KQL is a plus 

• Knowledge or experience working with Data Management and Processing platform a plus 

• Knowledge of client and server operating systems (e.g., Windows, Mac, Linux) 

• Knowledge or experience with PKI management (i.e., Cloud or On-prem) a plus 

• Strong emphasis on Microsoft security suite preferred 

• Subject matter expertise working with Threat Intelligence a plus 

• Excellent analytical and problem-solving skills 

• Strong communication and teamwork abilities 

Educational Requirements: 

• An associates or bachelor’s degree in Computer Science, Information Systems, or other related fields or commensurate hands-on experience 

• Cybersecurity