Cyber Security Engineer III

Staples is business to business. You’re what binds us together.

Our digital solutions team is more than a traditional IT organization. We are a team of passionate, collaborative, agile, inventive, customer-centric, results-oriented problem solvers. We are intellectually curious, love advancements in technology and seek to adapt technologies to drive Staples forward. We anticipate the needs of our customers and business partners and deliver reliable, customer-centric technology services. 

What you’ll be doing:

• Leverage SIEM and SOAR platforms to create and maintain detections to identify attacker TTPs.


• Create and maintain customized dashboards within SIEM to support Risk-Based Alerting and the SOC's detection and investigation needs.


• Manage Logging Infrastructure supporting both SIEM and SOAR solutions.


• Develop and manage both existing and new custom log integrations and parsers.


• Maintain continuous automated detection testing configurations.


• Perform testing and tuning of SIEM detection logic to minimize false positives, false negatives, and alert duplication.


• Consistently document detection use cases.


• Deliver functional value resulting from research in the form of queries, signatures, rules, and contextual information.


• Assist with advancing security standard operating procedures and incident response reporting.


• May provide 24 / 7 on-call security response. 

What you bring to the table:

• Ability to implement and maintain Cloud Security Monitoring


• Ability to write and tune Detection Use Cases and Automation Playbooks


• Proactively monitor SIEM detections for opportunities to improve and tune


• Proactively monitor SIEM Infrastructure for availability and efficiency improvements


• Ability to anticipate and prevent problems and roadblocks before they occur. Ability to identify problems and significantly improve, change, or adapt existing methods and techniques drawing from personal experiences and feedback.


• Ability to interact with internal and external peers and managers to exchange complex information related to areas of specialization.


• Demonstrated knowledge of MITRE ATT&CK Tactics and Techniques (or Killchain can be substituted not 100% required)


• Familiarity with Compliance & Regulatory Frameworks like PCI, SOX etc.