Cybersecurity SIEM Engineer

Advanced Technologies and Laboratories International, Inc.; Remote; USD 90,000 - 120,000; Full time

Job summary

A specialized technology firm is seeking a Cybersecurity SIEM Engineer to enhance their cybersecurity defense systems. The ideal candidate will possess at least 5 years of relevant experience with SIEM tools and significant knowledge of cybersecurity principles. Responsibilities include the operation of SIEM tools, development of cybersecurity content, and collaboration with IT teams. Competitive benefits and a commitment to employee growth through professional development opportunities are offered.

Benefits

Competitive total compensation package

Paid leave

401(k) retirement plan with company match

Professional growth opportunities

Qualifications

• 5+ years of experience in an IT role focused on SIEM engineering.
• Demonstrated ability to work both independently and collaboratively.
• One or more professional security certifications required.

Responsibilities

• Operate and maintain SIEM tools including log aggregators.
• Develop content for cybersecurity personnel to utilize tool capabilities.
• Collaborate with IT Services to integrate SIEM components.

Skills

Critical thinking

Problem solving

Collaboration

Communication skills

Research skills

Education

Bachelor's Degree in a related field

Master's Degree in a related field

Tools

Splunk SIEM

Cribl

Job description

Overview

Advanced Technologies and Laboratories (ATL), a Planned Systems International (PSI) company, is hiring for a Cybersecurity SIEM (Security Information Event Management) Engineer. The Cybersecurity SIEM (Security Information Event Management) Engineer administers and tunes the technology required to detect and analyze cybersecurity threats for maximum value and effectiveness. The ideal candidate is a self-starter and strong collaborator with multiple years’ experience installing and maintaining SIEMs and related components such as log aggregators and forwarders. Prior experience and/or familiarity with cybersecurity testing, incident response, or analysis is a plus. This position is located on NREL’s Golden, CO campus or remote.

Essential Functions and Job Responsibilities

Duties Shall Generally Include: Operates and maintains SIEM tools and components, such as log aggregators, forwarders, anddata observability systems.Tests, implements, and tunes new on-premises and cloud-based technical environments thatsupport infrastructure visibility, analysis, automation, and secure data retention. Develops content that enables cybersecurity personnel to take maximum advantage of existingtool capabilities, including workflows, integrations, and automated tasks.Collaborates across Information Technology Services teams to integrate SIEM componentswith cybersecurity enrichment and analysis platforms and system management tools.Creates and maintains architectural documentation and operational procedures that describe the scope, purpose, configuration, use, and maintenance of the SIEM tools and environments.Contributes to projects (as assigned or independently) that improve the effectiveness andefficiency of a cybersecurity program, including but not limited to workflowimprovements, automation expansion, management tool enhancements, program or strategic initiatives, and user awareness training

Minimum Requirements

• Related Bachelor's Degree and 5 or more years of experience. Or, related Master's Degree and 3 or more years of experience. Or, equivalent related education or experience.
• Ability to perform research, read documentation, and independently learn new skills.
• Must be a self-starter • Ability to work both alone and as part of a collaborative team
• Demonstrated skills in critical thinking and problem solving • Excellent written and verbal communication skills, including active listening, ability to prepare and deliver presentations, and clear written correspondence and documentation
• HSPD-12 compliant credential required.
• One or more professional security and/or systems engineering certifications, such as GIAC (SANS) certifications, Security+, CISSP, or training evidencing effort to attain future certification

Desired Qualifications

• Experience includes at least 3 years in an Information Technology role working specifically in a SIEM engineering role, or a role that includes significant time performing SIEM engineering (tool selection, installation, and maintenance)
• Technical background in multiple disciplines, including experience with: Windows and Linux server and workstation system administration; TCP/IP networking concepts, Bash command-line expertise, network protocols and architecture; security measures/defense-in-depth
• Experience managing, and troubleshooting tools and significant infrastructure in a production (live) environment
• Experience dealing with common cyber security concepts and threats and describing them to others
• Intermediate scripting/programming ability with various languages, preferably Python, in support of security orchestration and automation
• Technology-specific experience or training/certifications with Splunk SIEM and Cribl is a plus
• Understanding of cloud security architecture (AWS/Azure/Google Cloud), event collection and aggregation a plus.

Company Benefits

PSI offers full-time, benefits eligible employees a competitive total compensation package that includes paid leave, and options for employer sponsored group medical, dental, vision, short-term and long-term disability, life insurance, AD&D coverage, legal services, identity theft, and accident insurance. Flexible spending account and health saving account options offer pre-tax savings for qualified medical, dental, and vision expenses. The company sponsored 401(k) retirement plan has an employer contribution match that is immediately vested. We invest in the professional growth of our employees through professional courses, certifications, and tuition reimbursement programs.

EEO Commitment

It is company policy to promote equal employment opportunities. All personnel decisions, including, but not limited to, recruiting, hiring, training, promotion, compensation, benefits, and termination, are made without regard to race, color, religion, age, sex, sexual orientation, pregnancy, gender identity, genetic information, national origin, citizenship status, veteran status, protected veteran status, disability, or any other characteristic protected by applicable federal, state, or local law. Reasonable accommodations for applicants and employees with disabilities will be provided. If a reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact Human Resources by emailing [e-mail], or by dialing 703-575-8400.