[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"seo-content-skill-siem-us":3,"job-search-\u002Fde-us\u002Fjobs-by-skill\u002Fsiem?page=2":8,"skill-page-filters-\u002Fde-us\u002Fjobs-by-skill\u002Fsiem?page=2":160,"featured-jobs-\u002Fde-us\u002Fjobs-by-skill\u002Fsiem?page=2":323},{"image_path":4,"content_de":5,"content_en":5,"composite_key":6,"last_updated":7},"\u002Fimages\u002Fskill\u002Fsiem.webp",null,"skill:siem:us","2026-08-17T09:02:14.284002+02:00",{"total":9,"jobs":10},24,[11,69,109,136],{"id":12,"slug":13,"title":14,"raw_title":5,"is_featured":15,"company":16,"raw_hiringOrganization_logo_url":5,"processed_city_gmaps":19,"processed_country_iso_code_gmaps":21,"processed_home_office":23,"processed_salary_min":24,"processed_salary_max":25,"processed_salary_currency":26,"processed_salary_source":27,"processed_working_hours":28,"processed_employment_types":30,"processed_it_skills":31,"processed_it_skills_labels":34,"processed_job_expertise_skills":52,"processed_job_expertise_skills_labels":54,"max_cpc":67,"actual_cpc":68},68447,"principal-security-platform-engineer-western-alliance-bank","Principal Security Platform Engineer",false,{"name":17,"slug":18,"logo_url":5},"Western Alliance Bank","western-alliance-bank",[20],"Phoenix",[22],"US","onsite",150000,200000,"USD","estimated",[29],"FULL_TIME","permanent",{"aws":32,"iam":32,"apis":32,"cmdb":33,"rest":32,"siem":32,"soar":32,"azure":32,"entra":32,"python":32,"workday":33,"webhooks":32,"sailpoint":32,"powershell":32,"salesforce":33,"servicenow":32,"microsoft 365":32},3,2,[35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51],"Python","PowerShell","APIs","REST","Webhooks","AWS","Azure","Entra","Microsoft 365","Workday","Salesforce","ServiceNow","SIEM","SOAR","SailPoint","IAM","CMDB",{"runbooks\u002Fsops":32,"saas security":53,"cloud security":53,"risk frameworks":53,"incident response":32,"vendor management":32,"architecture design":53,"executive reporting":53,"regulatory compliance":53,"attack surface management":53,"vulnerability remediation":32,"security posture management":53},4,[55,56,57,58,59,60,61,62,63,64,65,66],"Cloud Security","SaaS Security","Security Posture Management","Attack Surface Management","Vulnerability Remediation","Regulatory Compliance","Risk Frameworks","Architecture Design","Vendor Management","Incident Response","Runbooks\u002FSOPs","Executive Reporting",1,1.5,{"id":70,"slug":71,"title":72,"raw_title":5,"is_featured":15,"company":73,"raw_hiringOrganization_logo_url":5,"processed_city_gmaps":76,"processed_country_iso_code_gmaps":78,"processed_home_office":79,"processed_salary_min":80,"processed_salary_max":81,"processed_salary_currency":26,"processed_salary_source":27,"processed_working_hours":82,"processed_employment_types":30,"processed_it_skills":83,"processed_it_skills_labels":84,"processed_job_expertise_skills":96,"processed_job_expertise_skills_labels":97,"max_cpc":67,"actual_cpc":68},49577,"global-director-of-autonomous-cyber-defense-and-security-event-triage-soc-mufg-bank-ltd","Global Director of Autonomous Cyber Defense and Security Event Triage (SOC)",{"name":74,"slug":75,"logo_url":5},"MUFG Bank, Ltd.","mufg-bank-ltd",[77],"Tempe",[22],"hybrid",203000,249000,[29],{"7ai":32,"edr":53,"elk":32,"llm":53,"siem":53,"soar":53,"torq":32,"ai\u002Fml":53,"splunk":32,"tanium":32,"scripting":32,"snowflake":32,"crowdstrike":32},[85,86,48,87,47,88,89,90,91,92,93,94,95],"AI\u002FML","LLM","EDR","Splunk","ELK","CrowdStrike","Tanium","Snowflake","Torq","7AI","Scripting",{"compliance":53,"purple team":53,"mitre att&ck":53,"threat hunting":53,"budget planning":53,"risk management":53,"cyber kill chain":53,"incident response":53,"vendor management":53,"security frameworks":53,"threat intelligence":53,"detection engineering":53,"cybersecurity operations":53},[98,64,99,100,101,63,102,103,104,105,106,107,108],"Cybersecurity Operations","Threat Hunting","Detection Engineering","Budget Planning","Risk Management","Compliance","Purple Team","Threat Intelligence","Security Frameworks","MITRE ATT&CK","Cyber Kill Chain",{"id":110,"slug":111,"title":112,"raw_title":5,"is_featured":15,"company":113,"raw_hiringOrganization_logo_url":5,"processed_city_gmaps":116,"processed_country_iso_code_gmaps":118,"processed_home_office":119,"processed_salary_min":120,"processed_salary_max":121,"processed_salary_currency":26,"processed_salary_source":27,"processed_working_hours":122,"processed_employment_types":30,"processed_it_skills":123,"processed_it_skills_labels":124,"processed_job_expertise_skills":131,"processed_job_expertise_skills_labels":132,"max_cpc":67,"actual_cpc":68},52753,"senior-security-engineer-remote-north-carolina-florida-or-south-carolina-preferred-10200-arch-capital-services-llc","Senior Security Engineer (Remote - North Carolina, Florida, or South Carolina preferred)",{"name":114,"slug":115,"logo_url":5},"Arch Capital Services LLC","arch-capital-services-llc",[117],"Greensboro",[22],"remote",130000,180000,[29],{"git":32,"siem":53,"soar":32,"ci\u002Fcd":32,"python":53,"edr\u002Fxdr":53,"rest apis":53,"powershell":32,"ai\u002Fllm integration":32,"cloud security (aws\u002Fazure\u002Fgcp)":53},[35,36,125,126,127,47,128,48,129,130],"REST APIs","Git","CI\u002FCD","EDR\u002FXDR","Cloud Security (AWS\u002FAzure\u002FGCP)","AI\u002FLLM Integration",{"ai security":32,"mitre att&ck":53,"threat hunting":53,"incident response":53,"security automation":53,"detection engineering":53,"cloud security auditing":53},[64,99,100,107,133,134,135],"Security Automation","Cloud Security Auditing","AI Security",{"id":137,"slug":138,"title":139,"raw_title":5,"is_featured":15,"company":140,"raw_hiringOrganization_logo_url":5,"processed_city_gmaps":143,"processed_country_iso_code_gmaps":145,"processed_home_office":79,"processed_salary_min":24,"processed_salary_max":25,"processed_salary_currency":26,"processed_salary_source":27,"processed_working_hours":146,"processed_employment_types":30,"processed_it_skills":147,"processed_it_skills_labels":148,"processed_job_expertise_skills":152,"processed_job_expertise_skills_labels":153,"max_cpc":67,"actual_cpc":68},76234,"vp-cyber-security-incident-detection-response-state-employees-credit-union","VP Cyber Security Incident Detection & Response",{"name":141,"slug":142,"logo_url":5},"State Employees' Credit Union","state-employees-credit-union",[144],"Raleigh",[22],[29],{"siem":53,"threat detection":53,"digital forensics":32,"incident response tools":53},[47,149,150,151],"Digital Forensics","Threat Detection","Incident Response Tools",{"threat hunting":53,"risk management":32,"siem engineering":53,"digital forensics":32,"incident response":53,"incident management":53,"root cause analysis":53,"security monitoring":53,"security operations":53,"playbook development":53,"regulatory compliance":32},[64,154,99,155,149,60,102,156,157,158,159],"Security Operations","SIEM Engineering","Incident Management","Security Monitoring","Root Cause Analysis","Playbook Development",{"industry":161,"employment_type":182,"expertise_skills":185,"it_skills":250,"salary_currency":319,"processed_working_hours":321},[162,166,170,173,176,179],{"key":163,"label":164,"count":165},"financial services","Financial Services",16,{"key":167,"label":168,"count":169},"insurance","Insurance",5,{"key":171,"label":172,"count":169},"banking","Banking",{"key":174,"label":175,"count":67},"employee benefits brokerage","Employee Benefits Brokerage",{"key":177,"label":178,"count":67},"property","Property",{"key":180,"label":181,"count":67},"casualty insurance","Casualty Insurance",[183],{"key":30,"label":184,"count":9},"PERMANENT",[186,189,192,196,198,201,203,206,208,211,213,215,217,220,223,226,229,232,234,237,240,242,245,247],{"key":187,"label":64,"slug":187,"count":188},"incident-response",15,{"key":190,"label":102,"slug":190,"count":191},"risk-management",8,{"key":193,"label":194,"slug":193,"count":195},"vulnerability-management","Vulnerability Management",6,{"key":197,"label":60,"slug":197,"count":169},"regulatory-compliance",{"key":199,"label":200,"slug":199,"count":169},"security-architecture","Security Architecture",{"key":202,"label":99,"slug":202,"count":169},"threat-hunting",{"key":204,"label":205,"slug":204,"count":169},"cybersecurity","Cybersecurity",{"key":207,"label":100,"slug":207,"count":53},"detection-engineering",{"key":209,"label":210,"slug":209,"count":53},"network-security","Network Security",{"key":212,"label":55,"slug":212,"count":53},"cloud-security",{"key":214,"label":63,"slug":214,"count":53},"vendor-management",{"key":216,"label":157,"slug":216,"count":53},"security-monitoring",{"key":218,"label":219,"slug":218,"count":32},"penetration-testing","Penetration Testing",{"key":221,"label":222,"slug":221,"count":32},"mitre-attck","Mitre Att&Ck",{"key":224,"label":225,"slug":224,"count":32},"documentation","Documentation",{"key":227,"label":228,"slug":227,"count":32},"threat-modeling","Threat Modeling",{"key":230,"label":231,"slug":230,"count":32},"identity-and-access-management","Identity And Access Management",{"key":233,"label":103,"slug":233,"count":32},"compliance",{"key":235,"label":236,"slug":235,"count":32},"risk-assessment","Risk Assessment",{"key":238,"label":239,"slug":238,"count":32},"nist-csf","Nist Csf",{"key":241,"label":105,"slug":241,"count":32},"threat-intelligence",{"key":243,"label":244,"slug":243,"count":32},"project-management","Project management",{"key":246,"label":133,"slug":246,"count":32},"security-automation",{"key":248,"label":249,"slug":248,"count":33},"api-security","Api Security",[251,254,257,261,264,267,270,273,275,278,281,284,286,289,292,295,296,299,302,304,307,310,313,316],{"key":252,"label":253,"slug":252,"count":9},"siem","Siem",{"key":255,"label":35,"slug":255,"count":256},"python",12,{"key":258,"label":259,"slug":258,"count":260},"powershell","Powershell",9,{"key":262,"label":263,"slug":262,"count":260},"soar","Soar",{"key":265,"label":266,"slug":265,"count":169},"servicenow","Servicenow",{"key":268,"label":269,"slug":268,"count":53},"aws","Aws",{"key":271,"label":272,"slug":271,"count":53},"windows","Windows",{"key":274,"label":88,"slug":274,"count":53},"splunk",{"key":276,"label":277,"slug":276,"count":53},"cicd","Ci\u002FCd",{"key":279,"label":280,"slug":279,"count":53},"automation","Automation",{"key":282,"label":283,"slug":282,"count":53},"linux","Linux",{"key":285,"label":95,"slug":285,"count":53},"scripting",{"key":287,"label":288,"slug":287,"count":32},"bash","Bash",{"key":290,"label":291,"slug":290,"count":32},"ms-azure","MS Azure",{"key":293,"label":294,"slug":293,"count":32},"sql","SQL",{"key":212,"label":55,"slug":212,"count":32},{"key":297,"label":298,"slug":297,"count":32},"edr","Edr",{"key":300,"label":301,"slug":300,"count":32},"javascript","Javascript",{"key":303,"label":149,"slug":303,"count":32},"digital-forensics",{"key":305,"label":306,"slug":305,"count":33},"shell-scripting","Shell Scripting",{"key":308,"label":309,"slug":308,"count":33},"iam","Iam",{"key":311,"label":312,"slug":311,"count":33},"cmdb","Cmdb",{"key":314,"label":315,"slug":314,"count":33},"gcp","Gcp",{"key":317,"label":318,"slug":317,"count":33},"zscaler","Zscaler",[320],{"key":26,"label":26,"count":9},[322],{"key":29,"label":29,"count":9},{"total":324,"jobs":325},0,[]]