Remote Managed SIEM Engineer (Sentinel & Splunk)

Critical Start, Inc.; Washington (District of Columbia); On-site; USD 80,000 - 110,000; Full time

Benefits offered by this job

Health benefits

Unlimited PTO

401(k) with matching

Parental and Military Leave

Dental and Vision

Life Insurance & Disability

Job summary

Critical Start, Inc. is seeking a dedicated Cybersecurity Engineer to join our Managed Security Services team. You will monitor and maintain multiple SIEM environments, onboard clients, and support security technologies such as Microsoft Sentinel and Splunk.

You will configure data sources, develop content, and provide technical guidance to clients and teammates, driving security maturity and robust SIEM programs.

Qualifications

• Bachelor's degree or equivalent in CS/Cybersecurity/IT with certifications preferred.
• 2+ years in a cybersecurity engineering role.
• 2+ years with SIEM tools, specifically Splunk & Microsoft Sentinel.
• Experience handling security data sources, log formats, and ingestion methods.
• Experience creating SIEM content such as alerts, reports, and dashboards.

Responsibilities

• Configure data sources and log forwarders; create dashboards, workbooks, reports, and alerts.
• Conduct environment reviews and gap analyses; fulfill advanced SIEM requests.
• Provide technical leadership and guidance to clients and colleagues on SIEM programs.
• Collaborate on developing technical paths and cross-functional training.
• Maintain best practices and assist in deploying security policies and content.

Skills

SIEM expertise

Security monitoring

Scripting

Client engagement

Technical leadership

Security documentation

Education

Bachelor's degree in CS/Cybersecurity/IT or equivalent

Tools

Splunk

Microsoft Sentinel

Job description

Critical Start, Inc. is seeking a dedicated Cybersecurity Engineer to join our Managed Security Services team. You will monitor and maintain multiple SIEM environments, onboard clients, and support security technologies such as Microsoft Sentinel and Splunk.

You will configure data sources, develop content, and provide technical guidance to clients and teammates, driving security maturity and robust SIEM programs.