Security Data & SIEM Engineer

Join Johnson Controls' Global Zero Trust & Security Analytics team as a Security Data & SIEM Engineer. You will manage and optimize our enterprise security logging pipeline and SIEM platform, with a primary focus on Cribl Stream for log processing and CrowdStrike NextGen SIEM for data onboarding. This role involves ensuring log health, normalizing data, optimizing costs, and integrating security platforms.

• Manage and optimize Cribl Stream log pipeline and CrowdStrike NextGen SIEM
• Onboard new enterprise log sources and normalize schemas
• Optimize log costs using filtering, deduplication, and routing
• Troubleshoot ingestion disruptions and collector errors
• Integrate security telemetry across enterprise platforms
• Experience with Cribl Stream or equivalent log pipeline technologies