Cybersecurity Ops Technologist - Splunk SIEM Engineer

Who Are We?

Taking care of our customers, our communities and each other. That’s the Travelers Promise. By honoring this commitment, we have maintained our reputation as one of the best property casualty insurers in the industry for over 170 years. Join us to discover a culture that is rooted in innovation and thrives on collaboration. Imagine loving what you do and where you do it.

Technology

Compensation Overview

The annual base salary range provided for this position is a nationwide market range and represents a broad range of salaries for this role across the country. The actual salary for this position will be determined by a number of factors, including the scope, complexity and location of the role; the skills, education, training, credentials and experience of the candidate; and other conditions of employment. As part of our comprehensive compensation and benefits program, employees are also eligible for performance-based cash incentive awards.

Salary Range

$99,100.00 - $163,400.00

1

As a Cybersecurity Ops Technologist I - Splunk SIEM Engineer, You will continuously manage and monitor SIEM platform health, data ingestion pipelines, and detection coverage gaps, applying critical thinking and structured problem-solving to investigate anomalies, resolve engineering issues, and drive improvements across the detection ecosystem. You will collaborate closely with SOC analysts and threat detection engineers to translate operational needs into scalable, high-fidelity detection solutions that enhance the team's ability to identify and respond to threats with speed and confidence.

What Will You Do?

• Tackle complex engineering and analytical activities that directly support the timely detection, identification, alerting, and response capabilities of the SOC and Threat Detection teams.
• Analyze identified malicious activity to determine weaknesses exploited, exploitation methods, effects on system and information.
• Conduct research, analysis, and correlation across a wide variety of all source data sets broadly and create alerts and controls, as appropriate.

• Builds tools and processes following CI/CD best practices to drive efficiency and support systems and team members across our line of business.
• Lead efforts to monitor health and optimize systems/components necessary for security operations to function.
• Provide Product and/or System ownership encompassing full responsibility for the ongoing production availability and effectiveness of Cybersecurity controls.

What Will Our Ideal Candidate Have?

• Degree or Certificate in Cybersecurity, Computer Science or related field.
• 5 years of experience in Cybersecurity with experience operating in security operations, working with log aggregation platforms and cloud automation.
• Extensive experience using and managing SIEM platforms or data pipelining tools.
• Strong critical thinking skills with the ability to approach problems creatively, reverse-engineer complex challenges, and develop effective solutions.
• Proficient in Linux and Windows command-line environments and scripting languages.
• Familiar with security operations center (SOC) workflows and processes, enabling effective cross-functional collaboration and support across security and engineering teams.
• Technical knowledge of computer networking concepts and protocols, network security methodologies, cyber threats and vulnerabilities, authentication, authorization, and access control methods.

• Ability to effectively communicate meaningful insights regarding the organization’s threat environment in order to improve its risk management posture.
• Experience Administrating Splunk
• Experience Administrating SIEM
• Experience w/ Python
• Experience w/ AWS Cloud Services

What is a Must Have?

• Bachelor’s degree or its equivalent in work experience.
• 2 years of experience working in a Technology related field or role.