Principal Cyber Security Engineer

Job overview

The Principal Cyber Security Engineer is a hybrid role in Detroit, MI. Compensation is stated as $110,000–$180,000 USD per year. The engineer supports Ally Financial's security operations and works with SOC analysts, incident responders, threat hunters, IT operations, and application teams. The role owns the lifecycle of SIEM capabilities, from architecture and data onboarding to detection content, automation, and continuous improvement. It helps deliver reliable, compliant log management and high-fidelity security detections across the organization.

What you'll do

• Design and maintain SIEM architecture, ingestion pipelines, parsers, schemas, storage, and retention
• onboard logs from enterprise and cloud sources
• optimize performance and cost
• implement access controls and governance
• ensure availability and disaster recovery
• define security metrics
• assess detection gaps
• provide runbooks and training
• align data handling with regulatory requirements.

What we're looking for

Skills & competencies

cyber security

siem

security engineering

splunk

cribl

threat detection

log management

cloud security

hybrid

detroit mi

ally

$110k–$180k

Work arrangement

• Weekend coverage required

Benefits & perks

• Paid time off and holidays
• 401(k) matching and company contributions
• tuition reimbursement
• medical, dental, and vision
• life and disability insurance
• family-building and caregiver benefits.

Why this role

Combines enterprise SIEM engineering with detection engineering, data pipeline management, and regulated log governance.

About the employer

Ally is hiring for this role. Industry: Credit Unions. Sector: 52.