Senior Data Protection Engineer

For more than 170 years, The Hanover has been committed to delivering on our promises and being there when it matters the most. We live our values every day, demonstrating we CARE through our values, Sustainability initiatives and inclusive corporate culture.

We are seeking a highly experienced and skilled Senior Data Protection Engineer to join our IT Security organization in our Worcester, MA office or remote work arrangement.

POSITION OVERVIEW:

The Security Engineer (SIEM & IDS/IPS Administrator) is responsible for the end to end administration, maintenance, and optimization of the organization’s on premise Security Information and Event Management (SIEM) platform and Intrusion Detection/Prevention Systems (IDS/IPS). This role ensures that these critical security technologies remain highly available, strategically aligned with enterprise security objectives, governed according to policy, and operating at peak effectiveness.

The engineer will work closely with cybersecurity, infrastructure, and governance teams to ensure that threat detection, alerting, and response capabilities are robust, reliable, and continuously improving.

This is a full time, exempt position.

IN THIS ROLE, YOU WILL:

SIEM Administration & Engineering

• Manage, maintain, and optimize the on premise SIEM platform, including log ingestion, parsing, correlation rules, dashboards, and alerting.
• Ensure SIEM availability, performance, and scalability to support enterprise security monitoring needs.
• Develop and tune detection rules, correlation logic, and use cases aligned with threat intelligence and organizational risk.
• Oversee log source onboarding, configuration, and validation across servers, applications, network devices, and security tools.
• Conduct regular SIEM health checks, capacity planning, and lifecycle management.

IDS/IPS Administration & Engineering

• Administer and maintain on premise IDS/IPS platforms, ensuring accurate detection and prevention of malicious activity.
• Tune signatures, policies, and rulesets to reduce false positives while maintaining strong detection coverage.
• Monitor IDS/IPS performance, availability, and event trends to identify anomalies or operational issues.
• Coordinate with network and security teams to implement policy updates, rule changes, and architectural improvements.

Operational Excellence & Governance

• Ensure both SIEM and IDS/IPS solutions are aligned with security governance frameworks, compliance requirements, and organizational policies.
• Maintain documentation for system configurations, processes, runbooks, and governance controls.
• Support audit activities by providing evidence, reports, and system configuration details.
• Participate in incident response activ