The Cybersecurity Engineer Lead will foster the development the detection engineering and threat hunting services performed by Sherwin-William’s Cyber Fusion Center (CFC). This team is responsible for creating and tuning high-fidelity detections for the company’s Cybersecurity Security Operations Center (CSOC) using our Security Information and Event Monitoring (SIEM) tool and various data sources. This candidate is also responsible for Threat Hunting, Security Monitoring, and creating automations to reduce manual work and increase efficiency.

Your primary focus is to create and tune detections and alerts that safeguard sensitive information from unauthorized access or harm caused by cybercriminals or malicious insiders. Assignments at this level will focus primarily on SIEM and Security Orchestration and Automated Response (SOAR) technologies that support the Cyber Fusion Center. Typically working alongside IT departments, business stakeholders, and cybersecurity engineers. This role reports directly to the CSOC manager.