SIEM Content Engineer
Kyndryl · Remote · Budapest, Hungary · 5d ago
Who We Are
At Kyndryl, we run and reimagine the mission-critical technology systems that drive advantage for the world’s leading businesses. We are at the heart of progress; with proven expertise and a continuous flow of AI-powered insight, enabling smarter decisions, faster innovation, and a lasting competitive edge. For our people—Kyndryls—that means doing purposeful work that powers human progress. Join us and experience a flexible, supportive environment where your well-being is prioritized and your potential can thrive.
The Role
Kyndryl’s Security & Resiliency is one of our most critical practices, ensuring enterprises, regardless of their size and complexity, remain secure, available, reliable, and resilient. We take Cybersecurity seriously. We're not just invested; we're committed. We're not just protecting data; we're empowering. Kyndryl is committed to making the world safer, not only by investing in state-of-the-art services and technologies but also by empowering underserved communities with essential cyber skills.
When you walk through our doors, you're not only joining a team but you're also becoming part of a legacy. Welcome to Kyndryl, where Cybersecurity isn't just a job – it’s a passion; a commitment to designing, running, and managing the most modern and reliable technology infrastructure that the world depends on every day.
As a Cybersecurity Defense professional at Kyndryl, you will encompass cybersecurity, incident response, security operations, vulnerability management, and the world of cyber threat hunting and security intelligence analysis all to protect the very heartbeat of organizations – their infrastructure.
In this role, you won't just monitor; you'll actively engage in the relentless hunt for cyber adversaries. In a world where every click and keystroke could be a potential gateway for attackers, your role will be nothing short of critical as you seek out advanced threats, attackers, and Indicators of Compromise (IOCs). Your expertise in endpoint detection and response (EDR) will be the shield that safeguards individual workstations, laptops, servers, and other devices from cybercrime. Your responsibilities go beyond vigilance. When it comes to network security, you'll utilize Network Detection and Response (NDR) to monitor the ever-flowing currents of network traffic. The incident management process will be used as you respond and manage to cybersecurity incidents.
Cybersecurity Defense is all about information. You'll gather, analyze, and interpret data applying your own and external threat intelligence to uncover potential security threats and risks. These insights and your ability to analyze complex attack scenarios will be the foundation of our security strategy – helping Kyndryl stay one step ahead of security breaches.
In Cybersecurity Defense at Kyndryl, you’re not just protecting the present – you’re shaping the future of digital security. Join us on this cybersecurity venture where your expertise and creativity will have a lasting impact in the world of digital defense.
Your Future at Kyndryl
When you join Kyndryl, you're not just joining a company – you're entering a space of opportunities. Our partnerships with industry alliances and vendors mean you'll have access to skilling and certification programs needed to excel in Security & Resiliency, while simultaneously supporting your personal growth. Whether you envision your career path as a technical leader within cybersecurity or transition into other technical, consulting, or go-to-market roles – we’re invested in your journey.
Who You Are
What You Will Do:
Develop Use Casesand building blocks
Design and configure XDR/SIEM/SOAR solutions (IBM, Microsoft, Palo Alto) in both on-prem and cloudenvironments.
Lead development XDR/SIEM/SOAR of dashboards/workbooks/notebooks in both on-prem and cloudenvironments.
Incident management use case/playbook/runbook development and finetuning.
Support SIEM/SOAR deployment and component architecture and ongoing optimum operation
Develop SIEM Event and Flow pipelines in both on-prem and cloudenvironments.
Manage XDR/SIEMthreat detection rules in both on-prem and cloudenvironments.
Perform data classification and normalization
Collaborate closely with cross-functional teams to ensure the effectiveness of detection mechanisms. (SOC Analyst, Cyber Threat Intel, Cyber Threat Hunting, SOC Management)
Integrate content with various platforms and ensure seamless deliveryaligned with business objectives and industry best practices.
Monitor and analyze (XDR/SIEM/SOAR) content performance metrics to drive continuous improvement, troubleshooting and documenting.
Continuously monitor the threat landscape and stay updated with the latest attack techniques and tactics.
Required Skills and Experience
Programming experience in any of the following: Python, PHP, Bash, PowerShell
Proficiency with blue team tooling (e.g., SIEM, SOAR, EDR/XDR) and methodologies (e.g., MITRE ATT&CK framework, log analysis).
Proven ability to research and adapt to emerging threats and technologies and translate that knowledge into engaging training content.
A deep understanding of networking, computing, and operating systems as they relate to security practices.
Strong verbal and written English communication skills, essential for conveying complex technical concepts.
Preferred Skills and Experience
Certifications such asCISSP, CISM, GIAC, or similar or equivalent work experienceare highlydesirable.
Experience in project management
Experience in any of the following KQL, AQL, XQL query languages
Problem solving mindset with a get things done mentality.
Good communication skills as you’ll be working in multidisciplinary environment and with many local and distributed teams and across many projects.
Strong defensive mindset with good understanding of threat actors TTPs and how to defend against these.
Being You
The “Kyn” in Kyndryl means kinship, which represents the strong bonds we have with each other, our customers and our communities. We focus on ensuring all Kyndryls feel included and we welcome people of all cultures, backgrounds, and experiences. Even if you don’t meet every requirement, we encourage you to apply. We believe in growth, and we’re excited to see what you can bring. At Kyndryl, employee feedback has told us that our number one driver of employee engagement is belonging. That sense of belonging — being a valued, respected, trusted member of the team — is fundamental to our culture and fueling great experiences for our customers. This dedication to welcoming everyone into our company means that Kyndryl gives you the ability to thrive and contribute to our culture of empathy and shared success. That’s The Kyndryl Way.
What You Can Expect
Your career with us isn’t just a job—it’s an adventure with purpose. We offer a dynamic, hybrid-friendly culture that supports your well-being and empowers you to grow. Our Be Well programs are thoughtfully designed to support your financial, mental, physical, and social health—because we know that when you feel your best, you do your best.
From your very first day, you’ll dive into impactful work that powers the systems our customers rely on every day. You won’t just contribute—you’ll make a difference, tackling meaningful projects that sharpen your skills and fuel your growth.
We’re here to champion your journey. With powerful tools to chart your career path, personalized development goals aligned with your ambitions, and continuous feedback to keep you inspired and on track, you’ll have everything you need to thrive and evolve. You’ll develop in-demand skills to grow your career and achieve your ambitions with access to cutting-edge learning opportunities—from certifications with Microsoft, Google, and Amazon to coaching and hands-on experiences. And through it all, you’ll be part of a culture that values empathy, restless learning, and a devotion to shared success.
We want you to thrive here—and we’re committed to helping you do just that. Ready to make an impact? Join us and help shape what’s next.
Get Referred!
If you know someone that works at Kyndryl, when asked ‘How Did You Hear About Us’ during the application process, select ‘Employee Referral’ and enter your contact's Kyndryl email address.