Lead Security SIEM Engineer

About the role

The Lead Security SIEM Engineer will design, implement and optimize NXP's SIEM platform across IT, OT and R&D environments, enabling advanced threat detection and automation for global security operations.

Key responsibilities

• Develop and maintain SIEM use cases, correlation rules and dashboards to improve detection fidelity.
• Integrate SIEM with SOAR, EDR, threat‑intelligence platforms and automate incident‑response workflows.
• Collaborate with SOC analysts, threat hunters and engineering teams to enhance detection logic and incorporate threat‑intel feeds.
• Define data‑retention strategies and ensure compliance with regulatory requirements.

Required profile

• 7+ years of cybersecurity experience with a focus on SIEM blue‑team operations.
• 3+ years working with CrowdStrike NGSIEM (or similar platforms such as Splunk, Sentinel).
• Proven experience securing OT/ICS environments and R&D/embedded systems.
• Leadership experience managing security professionals.

Required skills

• SIEM platforms: NGSIEM, Splunk, Microsoft Sentinel.
• Scripting/automation languages (e.g., Python, PowerShell).
• Knowledge of MITRE ATT&CK (Enterprise & ICS), NIST 800‑82, IEC 62443.
• Familiarity with EDR, NDR and threat‑intelligence platforms.
• Cloud security fundamentals for AWS, Azure and GCP.

What we offer

• Permanent full‑time contract with competitive salary, bonus plan and lunch vouchers.
• 25 vacation days, option to purchase company shares at a discount.
• Flexible working hours and hybrid work‑from‑home policy.
• Access to learning resources, on‑site relaxation areas and a modern office in Bucharest.