Senior Security Engineer at East West Bank

Job description

Since 1973, East West Bank has served as a pathway to success. With over 110 locations across the U.S. and Asia, we are the premier financial bridge between the East and West. Our teams of experienced, multi-cultural professionals help guide businesses and community members on both sides of the Pacific looking to explore new markets and create new opportunities, and our sustained growth and expertise in industries like real estate, entertainment and media, private equity and venture capital, and high-tech help build sustainable businesses and expand our associates’ potential for career advancement. Headquartered in California, East West Bank (Nasdaq: EWBC) is a top-performing commercial bank with a strong foundation, an enterprising spirit and a commitment to absolute integrity. East West Bank gives people the confidence to reach further. The Cyber Security Engineer supports the development and maintenance of a corporate-wide information security program to help protect the organization’s information assets. This role is responsible for the design, implementation, and continuous improvement of Security Information and Event Management infrastructure and data security capabilities. Key responsibilities include strengthening logging, monitoring, alerting, data protection, and compliance practices to support effective incident detection, response, forensic investigations, and risk management. The position partners closely with IT, compliance, and business teams to ensure security capabilities are reliable, scalable, and aligned with organizational and regulatory requirements. • SIEM Infrastructure & Operations • Engineer, build, and maintain logging infrastructure to support SIEM and Security Operations teams. • Monitor and manage SIEM performance, ensuring optimal data ingestion, correlation, and alerting. • Tune and configure SIEM rules to reduce noise and improve detection accuracy. • Security Monitoring & Incident Response • Investigate security incidents and lead response efforts as applicable • Monitor and analyze security logs and events from diverse sources (cloud, network, endpoint) • Create technically detailed reports on SIEM Status, metrics, and incident trends. • Data Security • Familiarity with data classification, DLP, and governance solutions. • Support data classification, labeling, and handling requirements. • Assist with DLP policy tuning, monitoring, and alert triage. • Support data discovery, sensitive data inventory, or DSPM-related activities. • Partner with business and technology teams to improve data protection controls. • Support data security metrics, reporting, and governance activities. • Compliance & Governance • Ensure SIEM logging standards meet regulatory and internal compliance requirements. • Collaborate with IT Governance, Risk, and Compliance teams to define log retention, access controls, and masking/encryption policies. • Collaboration & Enablement • Work with application developers and system owners to ensure proper log generation and forwarding • Assist internal teams and business partner in optimizing SIEM capabilities and workflows • 5+ years of experience in security engineering, with a focus on SIEM platforms • Experience with SIEM/DSPM/DLP and related security tools and technologies. • Strong understanding of intrusion detection/prevention systems, firewalls, and endpoint protection. • Hands-on experience with Linux OS • Experience with scripting and automation to optimize SIEM workflows • Certifications such as CISSP, CISM, CEH, or GIAC are preferred. • Knowledge of network infrastructure, including routers, switches, firewalls and associated network protocols and concepts. • Ability to interact with personnel at all levels and across all business units / organizations, and to understand business imperatives. Additional Qualifications • Proven trustworthiness and history of acting with integrity, taking pride in work, seeking to excel, being curious and adaptable, and communicating well. • Analytical and problem-solving mindset. • Highly organized and efficient The base pay range for this position is USD $115,000.00/Yr. - USD $160,000.00/Yr. Exact offers will be determined based on job-related knowledge, skills, experience, and location.

Requirements

Must-haves

SIEM Infrastructure & Operations • Engineer, build, and maintain logging infrastructure to support SIEM and Security Operations teams.
Monitor and manage SIEM performance, ensuring optimal data ingestion, correlation, and alerting.
Tune and configure SIEM rules to reduce noise and improve detection accuracy.
Security Monitoring & Incident Response • Investigate security incidents and lead response efforts as applicable
Monitor and analyze security logs and events from diverse sources (cloud, network, endpoint)
Create technically detailed reports on SIEM Status, metrics, and incident trends.
Data Security • Familiarity with data classification, DLP, and governance solutions.
Support data classification, labeling, and handling requirements.
Assist with DLP policy tuning, monitoring, and alert triage.
Support data discovery, sensitive data inventory, or DSPM-related activities.
Partner with business and technology teams to improve data protection controls.
Support data security metrics, reporting, and governance activities.
Compliance & Governance • Ensure SIEM logging standards meet regulatory and internal compliance requirements.
Collaborate with IT Governance, Risk, and Compliance teams to define log retention, access controls, and masking/encryption policies.
Collaboration & Enablement • Work with application developers and system owners to ensure proper log generation and forwarding
Assist internal teams and business partner in optimizing SIEM capabilities and workflows
5+ years of experience in security engineering, with a focus on SIEM platforms
Experience with SIEM/DSPM/DLP and related security tools and technologies.
Strong understanding of intrusion detection/prevention systems, firewalls, and endpoint protection.
Hands-on experience with Linux OS
Experience with scripting and automation to optimize SIEM workflows
Knowledge of network infrastructure, including routers, switches, firewalls and associated network protocols and concepts.
Ability to interact with personnel at all levels and across all business units / organizations, and to understand business imperatives.

Nice-to-haves

Certifications such as CISSP, CISM, CEH, or GIAC are preferred.

Application prep

Use the role’s language and application details while tailoring your materials.

Platform: icims
Effort: medium