Mid SIEM Engineer - Real-Time Cyber Defense

ecsfederal; Washington (District of Columbia); On-site; USD 108,000 - 125,000; Full time

Job summary

ECS Federal seeks a Mid-level SIEM Engineer to support a US Government civilian agency from our Washington, DC office. The role centers on designing and implementing security across Windows, Linux, UNIX environments and SIEM platforms to monitor and protect information systems.

Responsibilities include developing secure architectures, dashboards, and metrics; applying STIGs and best practices; collaborating with ISSO teams; and ensuring system integrity, availability, and confidentiality.

Qualifications

• Strong written and verbal communication skills are required.
• Experience with Windows, Linux, UNIX operating systems.
• Ability to design architectures and frameworks for secure systems.
• Familiarity with security controls (STIGs) and secure configuration practices.
• Experience with cyber security software development models.

Responsibilities

• Design hardware, operating systems, and software to address cybersecurity requirements.
• Develop and direct system testing and validation procedures and documentation.
• Develop dashboarding capabilities and SIEM/eGRC solutions for real-time monitoring.
• Create and track metrics using SIEM/eGRC dashboards.
• Design, implement, test, and evaluate secure interfaces between information systems.

Skills

Communication skills

Security engineering

SIEM administration

Python/Java scripting

REST API familiarity

NIST SP 800-161 knowledge

Network security concepts

Systems design experience

Education

Bachelor's degree or higher

Tools

CRIBL

SIEM platforms

REST API

Security design tools

Job description

ECS Federal seeks a Mid-level SIEM Engineer to support a US Government civilian agency from our Washington, DC office. The role centers on designing and implementing security across Windows, Linux, UNIX environments and SIEM platforms to monitor and protect information systems.

Responsibilities include developing secure architectures, dashboards, and metrics; applying STIGs and best practices; collaborating with ISSO teams; and ensuring system integrity, availability, and confidentiality.