On-Site SIEM Engineer — Splunk & QRadar

ZP Group; Newington (VA); On-site; USD 95,000 - 140,000; Full time

Benefits offered by this job

PTO

Medical benefits

401K

Job summary

Zachary Piper Solutions is seeking a SIEM Engineer to support a cybersecurity operations-focused team in Newington, VA. This on-site role involves designing, optimizing, and maintaining security monitoring capabilities to enable proactive threat detection and incident response.

The SIEM Engineer will work with Splunk Enterprise Security and IBM QRadar, developing detection content, tuning alerts, and correlating events across Windows, Linux, network, and cloud sources.

Qualifications

• 3+ years of experience in SIEM engineering or related cyber defense function.
• Hands-on experience with SIEM platforms, log management, event correlation, alert tuning, and security analytics tools.
• Strong understanding of security logs, networking protocols (TCP/IP, DNS, HTTP/S), and scripting (Python, Bash, PowerShell).
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field (or equivalent).
• Active TS/SCI security clearance.

Responsibilities

• Configure, maintain, and optimize SIEM platforms such as Splunk Enterprise Security and IBM QRadar.
• Develop and enhance SIEM use cases, detection content, correlation rules, and alerting logic.
• Analyze and correlate security events across data sources including Windows, Linux, network, firewall, IDS/IPS, and cloud environments.
• Tune alerts and improve monitoring to reduce false positives and increase threat detection effectiveness.
• Support incident investigations, threat hunting, and integration of threat intelligence data.

Skills

SIEM platforms

Log management

Event correlation

Alert tuning

Security analytics

Python scripting

PowerShell

Bash scripting

TCP/IP

NIST framework

MITRE ATT&CK

Education

Bachelor’s degree in Cybersecurity, IT, CS or related

Tools

Splunk Enterprise Security

IBM QRadar

Job description

Zachary Piper Solutions is seeking a SIEM Engineer to support a cybersecurity operations-focused team in Newington, VA. This on-site role involves designing, optimizing, and maintaining security monitoring capabilities to enable proactive threat detection and incident response.

The SIEM Engineer will work with Splunk Enterprise Security and IBM QRadar, developing detection content, tuning alerts, and correlating events across Windows, Linux, network, and cloud sources.