Remote-Eligible SIEM & UEBA Engineer (Mid)

Koniag Government Services; Washington (District of Columbia); Hybrid; USD 110,000 - 155,000; Full time

Benefits offered by this job

Medical, dental, vision insurance

401(k) retirement plan

Paid time off

Paid parental leave

Life and disability insurance

Flex spending accounts

Commuter benefits

Tuition reimbursement

Job summary

Koniag Government Services is seeking an experienced SIEM/UEBA Engineer (Mid) to support a federal government client. The role requires active clearance eligibility and entails on-site work in Washington, DC with approved telework options.

Responsibilities include administering and improving enterprise SIEM/UEBA platforms, log source onboarding, detection content development, and threat intelligence integration, across on-prem, cloud, and hybrid environments.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Systems, or a related field from an accredited college or university.
• Minimum of 3–5 years of hands‑on experience in SIEM engineering, security operations, or a closely related cybersecurity discipline within a federal government IT contracting or enterprise security environment.
• Hands‑on experience administering and engineering enterprise SIEM platforms, including log source onboarding, parser development, detection rule creation, alert tuning, and platform administration.
• Experience developing detection content aligned with the MITRE ATT&CK framework, including correlation rules, behavioral analytics, and threshold‑based alerting.

Responsibilities

• Administer, engineer, and maintain the enterprise SIEM platform, ensuring comprehensive security monitoring and incident investigation.
• Design and maintain log ingestion architectures with diverse sources onboarded and parsed into the SIEM.
• Develop log source onboarding documents, runbooks, and parser configurations for maintainability.
• Monitor SIEM health, performance, and ingestion reliability, addressing data gaps and parsing errors.
• Support SIEM platform upgrades, patches, and configuration changes with proper testing and documentation.
• Develop SIEM/UEBA architecture documentation and data flow diagrams.

Skills

SIEM engineering

UEBA administration

Detection engineering

Log ingestion

Threat intelligence

Incident investigation

Education

Bachelor's degree in Cybersecurity/CS/IT

Tools

Splunk

Microsoft Sentinel

IBM QRadar

Elastic SIEM

Job description

Koniag Government Services is seeking an experienced SIEM/UEBA Engineer (Mid) to support a federal government client. The role requires active clearance eligibility and entails on-site work in Washington, DC with approved telework options.

Responsibilities include administering and improving enterprise SIEM/UEBA platforms, log source onboarding, detection content development, and threat intelligence integration, across on-prem, cloud, and hybrid environments.