Home Depot / THD Atlanta, GA 30301 Remote
2022-01-13

Lead Cybersecurity Engineer - Logging and Monitoring (REMOTE)

3.7
The Home Depot is able to offer virtual employment of this position in the following states: AL, AK, AZ, AR, DE, DC, FL, GA, HI, ID, IL, IN, IA, KS, KY, LA, ME, MD, MA, MI, MN, MS, MO, MT, NE, NH, NJ, NM, NY, NC, ND, OH, OK, OR, PA, RI, SC, SD, TN, TX, UT, VT, VA, WA, WV, WI, WY.

Position Purpose:

The Logging and Monitoring service is responsible for handling the central logging pipeline and making sure we have the correct data set from event logs across the enterprise. This position will handle ingestion and extraction of log data, applying event logs to data models, generating logic to create and modify alerting, and tuning logic to increase fidelity. A successful candidate would be one with experience with a wide array of security logging technologies and security use cases, an analytical and detail-oriented mind, and strong organizational practices.

The Staff Systems Engineer is responsible for leading a team of engineers designing, building, and supporting The Home Depot's technical infrastructure of hardware and system software that drives the success of Home Depot and our customers. As a Staff Systems Engineer you will be part of a dynamic team with engineers of all experience levels who help each other build and grow technical and leadership skills while creating, deploying, and supporting production infrastructure. Staff Systems Engineers contribute to foundational infrastructure as code elements that can be reused as well as architectural diagrams and other related documentation. Staff Systems Engineers participates in the selection and lead the implementation of physical and virtual infrastructure to meet evolving enterprise and product team needs. As a Staff Systems Engineer, you will be a core player that participates and leads multiple efforts simultaneously. You are expected to build and grow the skillsets of more junior Engineers on the team.

Major Tasks, Responsibilities & Key Accountabilities:
25% Delivery and Execution - Leads configuration, debugging, and support for information technology solutions; Leads field and corporate rollouts of technology; Leads the stand up of necessary system software, hardware, and equipment (physical or virtual) to meet changing infrastructure needs; Creates and optimizes specifications for technology solutions; Produces and manages purchase requests for hardware and software; Leads development of test suites (functional, destructive, etc) to enable successful rapid deployment of infrastructure as code to production


15% Learning - Keeps abreast of innovations and industry trends as well as changes to internal systems and determines how they impacts tools, training, and support necessary to keep systems up, running, and secure; Participates in and contributes to learning activities around modern systems engineering core practices (communities of practice); Proactively views articles, tutorials, and videos to learn about new technologies and best practices being used within other technology organizations


30% Planning and Analysis - Researches and analyzes business trends and behavioral data to identify strategic opportunities for improvements and new initiatives; Leads the evaluation, development, and recommendation of specific strategic technology to provide cost-effective solutions that meet THD requirements; Researches and designs best fit infrastructure, network, database, cloud, AI, and security architectures for products; Proactively creates and maintains infrastructure as code and AI models for continuous improvement; Participates in strategic project planning and management across multiple efforts; Develops formal training courses


30% Support and Enablement - Collaborates with product and project teams to understand needs and enable them with infrastructure; Supports technology architecture design review efforts for project and product teams; Leverages tooling and custom applications to monitor the operational status of applications, infrastructure, networks, databases, and security; optimizes and tunes performance as appropriate; Drives root cause analysis, debugging, support, and post-mortem analysis for security incidents and service interruptions; Maintains, upgrades, and supports existing systems and infrastructure to ensure operational stability; Acts as a vendor liaison, owning resourcing, issue management, and documentation; Leads the production of in-house documentation around solutions; Provides application support for software running in production; Acts as a mentor to more junior Systems Engineers; Drives converting KB articles into AI models; Drives changes to analytic models used to analyze performance

Nature and Scope:
This position typically reports to Systems Engineer Manager or Sr Manager


This position typically has 0 Direct Reports

Environmental Job Requirements:
Environment:
1. Located in a comfortable indoor area. Any unpleasant conditions would be infrequent and not objectionable.
Travel:
No travel required.
Standard Minimum Qualifications:
Must be eighteen years of age or older.
Must be legally permitted to work in the United States.

Additional Minimum Qualifications:
  • 5+ years of related cyber security work experience
  • 3+ years of experience with SIEM or similar logging infrastructure
  • Background in Linux/Unix Administration
  • Strong understanding of networking infrastructure concepts, technologies, and protocols
  • Strong understanding of enterprise application and service message logging standards
  • Strong understanding of PCI, SOX, and related regulatory compliance programs
  • Broad experience across IT Security technology stacks
  • Solid people, team, and communication skills

Education Required:
The knowledge, skills and abilities typically acquired through the completion of a bachelor's degree program or equivalent degree in a field of study related to the job.

Years of Relevant Work Experience:
3 years

Certifications & Licenses:
  • CISSP or equivalent certifications

Physical Requirements:
Most of the time is spent sitting in a comfortable position and there is frequent opportunity to move about. On rare occasions there may be a need to move or lift light articles.

Preferred Qualifications:
  • Develop and maintain a logging strategy across a wide array of first- and third-party applications
  • Develop and maintain a library of required event log types with content and formatting requirements
  • Collaborate with IT Security stakeholders to develop new event log types to fulfil monitoring requirements
  • Assist in translating regulatory compliance requirements to logging requirements across a wide variety of applications
  • Collaborate with development teams to establish or improve logging of first-party applications to meet established requirements
  • Collaborate with service owners and vendors to ensure logging of third-party tools meets established requirements
  • Review ingested logs and verify compliance with established formatting and content requirements
  • Assist service owners with routing logs into aggregators
  • Prioritize logging implementation requirements and manage multiple workstreams in collaboration with multi-disciplinary teams
Knowledge, Skills, Abilities and Competencies:
- Action Oriented
  • Being Resilient
  • Business Insights
  • Global Perspective
  • Manages Ambiguity
  • Nimble Learning
  • Self-Development
  • Collaborates
  • Cultivates Innovation
  • Optimizes Work Processes
  • Situational Adaptability
  • Communicates Effectively
  • Drives Results
  • Interpersonal Savvy