Design, implement, and maintain SIEM and EDR monitoring; develop and tune detection use cases and correlations; onboard and parse data sources; write Regex extractions; create dashboards and reports; troubleshoot incidents and AV configurations; collaborate with SOC, resiliency, and engineering; maintain documentation.
With a career at The Home Depot, you can be yourself and also be part of something bigger.
Position Purpose:
The Home Depot is seeking a highly motivated Cybersecurity Engineer II with expertise in SIEM and EDR platforms such as Cortex XSIAM, Splunk, CrowdStrike, or similar technologies. In this role, you will be responsible for designing, implementing, and optimizing security monitoring and endpoint detection capabilities to enhance the organization's threat detection and response posture. You will develop and fine-tune detection use cases, create automation and correlation logic, investigate complex security challenges, and collaborate closely with SOC, Cyber Resiliency, and engineering teams to improve visibility, reduce risk, and strengthen cybersecurity operations. The ideal candidate combines strong technical expertise with an analytical mindset and a passion for advancing detection capabilities and operational excellence.
- Maintain day-to-day operational health of EDR and SIEM infrastructure
- Conduct research to baseline normal activity and tune out noise from alerting
- Tune security use cases to provide high fidelity alerts
- Collaborate to develop new, custom security use cases, log correlations, and detection rules
- Apply event data to existing security use cases and models
- Develop and configure dashboards for monitoring event trends and alerts
- Configure reporting to provide key metrics and trends
- Collaborate with external teams to onboard new data sources to SIEM
- Validate appropriate extraction, parsing, and formatting in event data
- Write custom field extractions in RegEx
- Perform troubleshooting and break/fix efforts during service disruptions
- Configure AV exceptions and blocks
- Maintain updated service documentation
- Perform other related duties as assigned
Required Skills:
- 2+ years of cyber security work experience
- 1+ years of SIEM or EDR specific work experience with platforms such as Cortex XSIAM, Splunk, CrowdStrike, etc.
- Good understanding of networking infrastructure concepts, technologies, and protocols
- Capable of identifying gaps in logging/monitoring/endpoint protection and recommending solutions
- Able to bridge the gap between technical and non-technical constituents
- Solid people, team, and communication skills
Preferred Skills:
- Security+ and SIEM Vendor Certification (any vendor) and EDR Vendor Certification (any vendor) or equivalent certifications
- Incident Response / SOC work experience
- Experience working with cloud-based solutions, such as Azure, GCP
- Experience with Linux/Unix Administration
- Experienced with writing formal reports
Key Responsibilities:
- 100% Deliver Execution & Problem Solving - Collaborate with Enterprise Technology to configure and integrate cybersecurity systems that mitigate risk; Troubleshoot and quickly resolve escalated incidents; Design, build, configure, maintain, monitor cybersecurity threat defense capabilities and user access management; Coordinate integration and collaboration with managed security providers; Investigate and recommend corrective actions related to incidents
Direct Manager/Direct Reports:
- This position typically reports to Manager or Sr. Manager
- This position has 0 Direct Reports
Travel Requirements:
- No travel required.
Physical Requirements:
- Most of the time is spent sitting in a comfortable position and there is frequent opportunity to move about. On rare occasions there may be a need to move or lift light articles.
Working Conditions:
- Located in a comfortable indoor area. Any unpleasant conditions would be infrequent and not objectionable.
Minimum Qualifications:
- Must be eighteen years of age or older.
- Must be legally permitted to work in the United States.
Minimum Education:
- The knowledge, skills and abilities typically acquired through the completion of a bachelor's degree program or equivalent degree in a field of study related to the job.
Minimum Years of Work Experience:
- 2+
Competencies:
- Action Oriented
- Collaborates
- Communicates Effectively
- Customer Focus
- Drives Results
For California, Colorado, Connecticut, Rhode Island, Nevada, New York City, Ithaca (NY), Westchester County (NY), and Washington residents:
Similar Jobs
Artificial Intelligence • Automotive • Greentech • Information Technology • Machine Learning • Software • Cybersecurity
Provide remote technical support for VinSolutions and Cox Automotive products via phone, email, and chat. Troubleshoot and resolve application issues, log cases in the CRM, escalate to other teams as needed, and keep clients informed while meeting quality standards and shift requirements.
Top Skills:
Genesys PurecloudExcelMicrosoft OutlookMicrosoft WordSalesforceVinsolutions
Security • Cybersecurity
Design, build, and deploy production-grade ML systems for ICS/xOT cybersecurity, including threat detection, anomaly detection, NLP/LLM applications, and scalable data pipelines with observability and MLOps practices for cloud and on-prem environments.
Top Skills:
Ci/CdDockerGoHuggingfaceJavaKubernetesLlmsMessage QueuingMlopsModel VersioningNlpPipeline OrchestrationPythonPyTorchRetrieval-Augmented Generation (Rag)RustScikit-LearnSQLStream ProcessingTensorFlow
Security • Cybersecurity
Hunt, identify, and analyze adversary tools, malware, and tradecraft targeting ICS/OT. Develop and maintain analysis tools and scripts, contribute to threat assessments and customer advisories, leverage intel and network analysis tools, recommend automation and telemetry improvements, and support incident response and external communications.
Top Skills:
C#CensysDiamond ModelJoe SandboxKill ChainMitre Att&CkNetflowPythonShodanStorm Query LanguageSynapseVirustotal
What you need to know about the Chicago Tech Scene
With vibrant neighborhoods, great food and more affordable housing than either coast, Chicago might be the most liveable major tech hub. It is the birthplace of modern commodities and futures trading, a national hub for logistics and commerce, and home to the American Medical Association and the American Bar Association. This diverse blend of industry influences has helped Chicago emerge as a major player in verticals like fintech, biotechnology, legal tech, e-commerce and logistics technology. It’s also a major hiring center for tech companies on both coasts.
Key Facts About Chicago Tech
- Number of Tech Workers: 245,800; 5.2% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: McDonald’s, John Deere, Boeing, Morningstar
- Key Industries: Artificial intelligence, biotechnology, fintech, software, logistics technology
- Funding Landscape: $2.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Pritzker Group Venture Capital, Arch Venture Partners, MATH Venture Partners, Jump Capital, Hyde Park Venture Partners
- Research Centers and Universities: Northwestern University, University of Chicago, University of Illinois Urbana-Champaign, Illinois Institute of Technology, Argonne National Laboratory, Fermi National Accelerator Laboratory
