Are you an experienced Information Security engineer with a strong background in SIEM (Security Information and Event Management) applications within a global infrastructure? Do you have experience with a demonstrable understanding around securing and administering remote access technologies?
This job will focus on enhancing visibility and creating intelligent correlation logic based on Groupon’s global SIEM architecture. This position will support the continued configuration, deployment, and management of a SIEM across a global infrastructure. You will be tasked with implementing intelligent behavior-based monitoring rules, handling log sources & software updates, while also helping expand SIEM coverage and visibility.
Initial responsibilities will also involve securing Groupon’s remote access technologies to protect systems from unauthorized access and abuse. Remote access rules and policies will require integration into a global role based access control model based on Authentication, Authorization, and Accountability (AAA) standards for securing access to resources, policy enforcement and proper auditing controls.
Though this position’s primary foundations will focus on enhancement to our SIEM infrastructure and securing remote access technologies, responsibilities will expand into other technical information security projects and team responsibilities over time.