Security Data & SIEM Engineer

Johnson Controls is seeking a Security Data & SIEM Engineer to enhance security visibility across cloud and enterprise environments. You will be responsible for designing, tuning, and operating security logging and SIEM capabilities to support threat detection and incident response. This hands-on role involves managing the security data pipeline, including log onboarding, detection content, and alert tuning, while collaborating with various teams to improve security telemetry.

• Configure and maintain SIEM content, including log sources, parsing, correlation rules, dashboards, and alerts
• Ingest and normalize security events from cloud, endpoint, network, identity, and application sources
• Tune detections to reduce noise and improve signal quality for timely response
• Support security tooling across SIEM, vulnerability management, endpoint protection, and CSPM platforms
• Integrate security alerts and workflows with ticketing tools like ServiceNow and Jira
• Partner with threat detection and incident response teams to investigate events and improve coverage