Job Description

The SIEM Monitoring Cybersecurity Architect plays a critical role in the day-to-day implementation, maintenance, and support of cybersecurity visibility and monitoring within the enterprise. This role manages, maintains, and improves the monitoring and visibility tools and integrations to support the implementation of a zero-trust infrastructure.  

This position is responsible for implementing, configuring, and improving overseeing integrations and automation to support cybersecurity visibility efforts. These efforts will have a focus on reducing detection delays, reducing false positives, and improving the integration of new and existing tools to provide effective detection of activities in the Enterprise to enable comprehensive visibility while adhering to best practices and industry standards.    

This role will be responsible for collaborating closely with other departments to provide engineering support for new and existing tools related to monitoring functions and integrations. Additionally, this position also supports the Cybersecurity department through security research and development, product evaluations, consulting, project support, and other tasks as needed. The Cybersecurity Architect provides technical expertise to implement security related standards, procedures, and guidelines appropriate to securing the existing environment in partnership with other departments and Information Technology.  

• Support all activities performed by the Cybersecurity team associated with the deployment and maintenance of all Cybersecurity systems related to monitoring and visibility   
• Participate in the development of the annual strategy and capacity planning activities  
• Manage projects with IT and property teams and for projects internal to Cybersecurity  
• Assist with general administrative activities in collaboration with all team members  
• Prepare status reports and other metrics as needed 

Visibility Integrations 

• Implement and manage integrations across the cybersecurity suite of solutions to establish or enhance visibility and secure access across multiple applications and systems. 
• Design and implement ingestion of logs from endpoints, servers, network devices, applications, cloud platforms (AWS, Azure, GCP), and SaaS services. 
• Ensure parsing, normalization, and enrichment of log data for effective correlation and analysis. 
• Develop automation and data processing logic using Python and Javascript
• Configure APIs and collectors for hybrid environments to ensure full telemetry coverage. 
• Enable contextual enrichment of logs with IOCs (IPs, domains, file hashes, etc.).
• Ensure reliability, performance, and cost efficiency of high-volume pipelines and services
• Implement monitoring, alerting, and data quality checks
• Collaborate with application and system owners to integrate monitoring solutions into existing and new services. 
• Create and maintain comprehensive documentation, including configuration settings, procedures, and user guides. 
• Provide support to end-users for monitoring problems. 
• Manage and prioritize opportunities to enhance and make available new functionality. 

• Bachelor's degree in Computer Science, Business Management, MIS, Information Technology, or similar related cyber disciplines; or equivalent work experience  
• At least a minimum of five (7) years of related business experience  
• Superior communications skills, both verbal and written  
• Direct experience managing multi-faceted integration projects 
• Requires knowledge of underlying platform(s); prior experience working with interdependent platforms; working knowledge of standards and impact of non-standard approaches  
• Technical knowledge of business processes and procedures and systems to support it  
• Ability to maximize system to support business processes, recommend and influence business process change to maximize use of system 
• Strong problem-solving and analytical abilities.
• Certified training in Security Management, Risk and Compliance Solutions and Practices. CISSP, GSEC, CRISC, or related certification(s).
• Programming and scripting skills for automation and customization. 
• Experience supporting SIEM, SOAR, or security analytics platforms.
• Experience with cloud-based monitoring solutions. 

At Caesars Entertainment, Inc., our Team Members create the extraordinary. We are the largest casino-entertainment company in the U.S. and one of the world's most diversified casino-entertainment providers. Since beginning in Reno, Nevada, in 1937, Caesars Entertainment has grown through the development of new resorts, expansions and acquisitions. Our resorts operate primarily under the Caesars®, Harrah's®, Horseshoe® and Eldorado® brand names. We focus on building loyalty and value with our guests through a combination of impeccable service, operational excellence and technological leadership. The company is committed to its Team Members, suppliers, communities and the environment through its PEOPLE PLANET PLAY framework.

Our Caesars family is driven by our Mission, Vision and Values. We take great pride in living these values – Together We Win, All In On Service and Blaze the Trail – every day. Our mission, “Create the Extraordinary”. Our vision, “Create spectacular worlds. That immerse, inspire and connect you. We don’t perform magic; we create it with excellence. #WeAreCaesars”. If you are ready to create some magic, we invite you to explore our dynamic, yet unique, career opportunities.