Cloud-First SIEM Modernization Engineer

TIAG; Chevy Chase (MD); Hybrid; USD 130,000 - 170,000; Full time

Job summary

TIAG is seeking a SIEM Modernization Security Engineer to support a USU enclave modernization, reporting to the Bethesda, MD location in a Hybrid capacity. You will help transition 150 on-premise and cloud servers from a legacy Splunk Enterprise environment to a modern cloud-native SIEM, validate telemetry, and develop technical artifacts.

The role involves auditing current systems, evaluating platforms (Splunk Cloud, Microsoft Sentinel, Google Chronicle), implementing security baselines, RMF

Qualifications

• 3–7 years of hands-on cybersecurity engineering focusing on SIEM engineering, log routing, telemetry validation, and vulnerability management.

Responsibilities

• Assist in auditing the current SIEM environment to evaluate onboarded log sources, telemetry coverage, ingestion methods, and parser configurations.
• Compare different SIEM platforms to identify the best solution and ensure proper data protection and handling.
• Develop and implement security baselines in the selected platform to meet DoD requirements and Zero Trust principles.
• Provide Tier 2 support to resolve ingestion failures, parser issues, and connectivity problems during the transition.
• Create SOPs for Tier 1 admins covering onboarding, telemetry validation, and health monitoring.
• Support training delivery on the SIEM platform capabilities and query languages.

Skills

SIEM engineering

Log routing

Telemetry validation

Vulnerability management

Job description

TIAG is seeking a SIEM Modernization Security Engineer to support a USU enclave modernization, reporting to the Bethesda, MD location in a Hybrid capacity. You will help transition 150 on-premise and cloud servers from a legacy Splunk Enterprise environment to a modern cloud-native SIEM, validate telemetry, and develop technical artifacts.

The role involves auditing current systems, evaluating platforms (Splunk Cloud, Microsoft Sentinel, Google Chronicle), implementing security baselines, RMF