This is where you save and sustain lives
at baxter, we are deeply connected by our mission. No matter your role at baxter, your work makes a positive impact on people around the world. You'll feel a sense of purpose throughout the organization, as we know our work improves outcomes for millions of patients.
baxter's products and therapies are found in almost every hospital worldwide, in clinics and in the home. For over 85 years, we have pioneered significant medical innovations that transform healthcare.
together, we create a place where we are happy, successful and inspire each other. This is where you can do your best work.
join us at the intersection of saving and sustaining lives—where your purpose accelerates our mission.
responsibilities
* the it sr. Specialist – soar engineer provides direct support for soar operations and engages stakeholders to identify logging requirements and opportunities for data enrichment to make the data actionable for incident response, threat hunting, it operations, machine learning, and other functions.
* create integrations, manage capacity and forecast future growth, and ensure that alerting is comprehensive and effective against a range of known attacks as well as emerging techniques.
* ensure the health of the soar environment, monitor usage and data growth, report on performance, highlighting issues and addressing them with management and key stakeholders.
* provide timely break‑fix support when issues occur, consistently inspecting and correcting issues with data onboarding, normalization and search.
* engage stakeholders, consult and advise on platform use to develop custom dashboards and integrations to get the most out of the available data.
* establish, monitor and maintain connections to external sources of data enrichment such as threat intelligence feeds, configuration management databases and identity stores.
* create and maintain playbooks for security alerting, maximizing coverage across the mitre att&ck framework categories, and anticipating emerging techniques; monitor the effectiveness of alerting and continue to tune them to ensure detection performs as expected.
* be a resource providing operational insight during major incidents affecting security or it operations.
* support additional engineering, operations and it security projects as requested by management.
qualifications and skills
* 5+ years of soar/siem engineering experience, implementing, maintaining, and tuning enterprise soar/siem environments such as splunk, qradar, sentinel, palo alto, crowdstrike, etc.
* use case development experience, familiarity with mitre att&ck framework.
* bachelor’s degree in computer science, a related field or equivalent demonstrated experience and knowledge.
* significant experience with windows and linux system administration and shell scripting.
* experience with cloud infrastructure and automation frameworks such as chef, ansible, puppet or saltstack.
* familiar with agile development practices.
* familiar with enterprise it processes for asset, configuration, change, incident and problem management.
* excellent english verbal and written communication skills.
* demonstrated skill working as part of a team, collaborating, and supporting peers in a fast‑paced environment.
* industry certifications nice to have: gcfa, gcih, ceh or related.
eeo (equal employment opportunity)
baxter is an equal opportunity employer. Baxter evaluates qualified applicants without regard to race, color, religion, gender, national origin, age, sexual orientation, gender identity or expression, protected veteran status, disability/handicap status or any other legally protected characteristic.
#j-18808-ljbffr