Elastic SIEM Lead Engineer – TS/SCI (Onsite)

Cybersecurity Jobs; San Antonio (TX); On-site; USD 145,000 - 180,000; Full time

Benefits offered by this job

Health insurance

Life insurance

Disability insurance

Retirement plan

Paid holidays

Paid time off

Job summary

Maximus is seeking a senior SIEM engineer to support defense operations using Elastic SIEM across classified enclaves. This on-site role in San Antonio, TX, requires TS/SCI clearance and delivers comprehensive insurance, retirement, and PTO benefits.

You will engineer, operate, and sustain SIEM capabilities, mentor engineers, and collaborate with cyber operators on detection and incident workflows in DoD-adjacent environments.

Qualifications

• Active TS/SCI clearance required or eligible.
• 7+ years hands-on cybersecurity engineering experience.
• Elastic SIEM integrations and troubleshooting in operational environments.

Responsibilities

• Lead complex SIEM engineering tasks with minimal supervision.
• Operate and sustain Elastic SIEM across multiple enclaves.
• Monitor SIEM health, capacity, and outages per SLAs.
• Develop detection rules, alerts, and dashboards in Elastic.
• Ingest and normalize logs from endpoint, network, cloud, and applications.

Skills

TS/SCI clearance

Cybersecurity engineering

Leadership

Mentoring engineers

Threat detection

Education

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related field

Tools

Elastic Stack

Kubernetes/EKS

AWS GovCloud

Job description

Maximus is seeking a senior SIEM engineer to support defense operations using Elastic SIEM across classified enclaves. This on-site role in San Antonio, TX, requires TS/SCI clearance and delivers comprehensive insurance, retirement, and PTO benefits.

You will engineer, operate, and sustain SIEM capabilities, mentor engineers, and collaborate with cyber operators on detection and incident workflows in DoD-adjacent environments.