Bizoforce Hiring – SIEM Lead Cyber Security | Plano, Texas, USA

Bizoforce is hiring an experienced SIEM Lead Cyber Security professional for a short-term contract opportunity. The ideal candidate will have extensive experience managing security incident response tools, including SIEM, EDR, IDS/IPS, and digital forensic solutions. The role involves leading the implementation, configuration, integration, and optimization of security tools to strengthen threat detection and incident response capabilities. The candidate will also guide junior team members, improve security operations through automation, and ensure compliance with organizational security policies and industry best practices.

Experience (in Years)

• Required Experience: 7–11 years
• Relevant Experience: Extensive experience in SIEM, cybersecurity operations, incident response, and security tool management.
• Leadership Experience: Experience mentoring junior engineers and leading security tool management activities.

Required Skills

• SIEM Tools: Experience with Splunk, IBM QRadar, Microsoft Sentinel, or similar platforms.
• EDR Solutions: Knowledge of CrowdStrike, Carbon Black, or equivalent endpoint detection and response tools.
• IDS/IPS Tools: Experience with Snort, Suricata, or similar technologies.
• Digital Forensics: Familiarity with tools such as EnCase and FTK.
• Cybersecurity Fundamentals: Strong understanding of network security, endpoint security, threat detection, and incident response.
• Scripting and Automation: Proficiency in Python, PowerShell, or similar scripting languages.
• Security Tool Management: Experience deploying, configuring, maintaining, and optimizing incident response tools.
• Alert Tuning: Ability to refine detection rules, reduce unnecessary alerts, and improve security monitoring.
• Incident Investigation: Experience conducting root cause analysis and forensic investigations.
• Tool Integration: Ability to integrate security tools with other organizational systems and platforms.
• Troubleshooting: Strong analytical and problem-solving skills.
• Communication: Excellent written and verbal communication skills.
• Team Collaboration: Ability to work effectively with IT, security operations, legal, and compliance teams.

Preferred Skills / Good-to-Have Technical Experience

• Experience managing security tool licenses, renewals, and vendor relationships.
• Knowledge of security tool upgrades, migrations, and patch management.
• Experience automating incident response workflows.
• Familiarity with security audits, assessments, and compliance requirements.
• Experience developing security documentation, operational procedures, and performance reports.
• Ability to train and mentor junior cybersecurity engineers.
• Experience improving incident response processes and security operations efficiency.

Qualifications

• Strong practical experience in cybersecurity and incident response tool management.
• Demonstrated experience deploying and managing security tools in large, complex environments.
• Ability to analyze security events, identify threats, and recommend remediation measures.
• Understanding of security policies, regulatory requirements, and organizational compliance standards.
• Strong documentation, reporting, and stakeholder communication skills.
• Ability to lead technical initiatives and support continuous improvement within cybersecurity operations.

Key Responsibilities

Security Tool Implementation and Management

• Oversee the selection, implementation, configuration, and management of SIEM, EDR, IDS/IPS, and digital forensic tools.
• Ensure security tools capture the necessary data for effective threat detection and incident response.
• Regularly review and update configurations to address emerging threats and organizational requirements.
• Manage tool integrations with other security systems and platforms.
• Maintain tools through regular updates, patches, upgrades, and configuration improvements.

Incident Detection and Response

• Use SIEM, EDR, and other security tools to detect, investigate, and respond to cybersecurity incidents.
• Conduct in-depth analysis to identify incident root causes and determine appropriate remediation actions.
• Optimize alerts, detection rules, and tool performance to improve incident response effectiveness.
• Participate in post-incident reviews and recommend improvements to security tools and processes.

Automation and Continuous Improvement

• Lead efforts to automate incident response processes using scripting and available tool capabilities.
• Identify opportunities to improve detection accuracy, operational efficiency, and incident response workflows.
• Develop and implement best practices for security tool usage across the cybersecurity team.
• Stay informed about emerging cybersecurity technologies and industry trends.

Team Collaboration and Knowledge Sharing

• Collaborate with security operations, vulnerability management, IT, legal, and compliance teams.
• Provide technical guidance and training to junior team members and relevant stakeholders.
• Share knowledge on security tool capabilities, incident response practices, and emerging threats.
• Support cross-functional initiatives to strengthen the organization's security posture.

Documentation, Reporting, and Compliance

• Develop and maintain documentation covering tool configuration, administration, and usage.
• Generate reports on tool performance, incident response metrics, and operational effectiveness.
• Ensure security tools are used in accordance with legal, regulatory, and organizational policies.
• Assist with security audits, assessments, and compliance reviews.
• Manage tool licensing, renewals, vendor coordination, and upgrades as required.

Assignment Details

• Job Location: Plano, Texas, USA
• Work Mode: On-site
• Job Type: Full Time
• Open Positions: Multiple
• Working Hours: 9:00 AM – 5:00 PM
• Hours per Week: 40 hours
• Timesheet Cycle: Weekly
• Job Status: Active