Cybersecurity Engineer II | SIEM and EDR (Remote)

Position Purpose

The Home Depot is seeking a highly motivated Cybersecurity Engineer II with expertise in SIEM and EDR platforms such as Cortex XSIAM, Splunk, CrowdStrike, or similar technologies. In this role, you will be responsible for designing, implementing, and optimizing security monitoring and endpoint detection capabilities to enhance the organization's threat detection and response posture. You will develop and fine-tune detection use cases, create automation and correlation logic, investigate complex security challenges, and collaborate closely with SOC, Cyber Resiliency, and engineering teams to improve visibility, reduce risk, and strengthen cybersecurity operations. The ideal candidate combines strong technical expertise with an analytical mindset and a passion for advancing detection capabilities and operational excellence.

• Maintain day-to-day operational health of EDR and SIEM infrastructure
• Conduct research to baseline normal activity and tune out noise from alerting
• Tune security use cases to provide high fidelity alerts
• Collaborate to develop new, custom security use cases, log correlations, and detection rules
• Apply event data to existing security use cases and models
• Develop and configure dashboards for monitoring event trends and alerts
• Configure reporting to provide key metrics and trends
• Collaborate with external teams to onboard new data sources to SIEM
• Validate appropriate extraction, parsing, and formatting in event data
• Write custom field extractions in RegEx
• Perform troubleshooting and break/fix efforts during service disruptions
• Configure AV exceptions and blocks
• Maintain updated service documentation
• Perform other related duties as assigned

Required Skills

• 2+ years of cyber security work experience
• 1+ years of SIEM or EDR specific work experience with platforms such as Cortex XSIAM, Splunk, CrowdStrike, etc.
• Good understanding of networking infrastructure concepts, technologies