Remote Senior Security Analyst - Elastic SIEM

ecsfederal; Virginia (MN); Hybrid; USD 90,000 - 120,000; Full time

Benefits offered by this job

US Passport required

Secret clearance preferred

Domestic travel

Job summary

Everforth ECS seeks a Sr. Security Analyst to work in a remote capacity, focusing on Elastic SIEM operations, threat hunting, and incident response across network, cloud, and endpoint telemetry.

The position requires strong fundamentals, customer interaction, and the ability to operate with limited oversight in fast-paced environments. Responsibilities include building detection content, tuning rules, and mentoring customers on SIEM usage, with travel planned for domestic engagements as needed.

Qualifications

• 2+ years in cybersecurity with SIEM experience.
• Hands-on in detection, hunting, and incident response.
• Experience with Elastic SIEM, Kibana, and logs.

Responsibilities

• Analyze alerts using SIEM, perform investigations and provide findings.
• Develop and tune detection content, dashboards, and rules.
• Collaborate with customers to improve security posture and response processes.
• Support incident containment, root cause analysis, and corrective actions.
• Automate workflows with Python/PowerShell and integrate telemetry.

Skills

Elastic SIEM

Threat hunting

Incident response

Python/PowerShell scripting

Kibana

Analytical thinking

Customer interaction

Tools

Elastic SIEM

Kibana

Logstash

Job description

Everforth ECS seeks a Sr. Security Analyst to work in a remote capacity, focusing on Elastic SIEM operations, threat hunting, and incident response across network, cloud, and endpoint telemetry.

The position requires strong fundamentals, customer interaction, and the ability to operate with limited oversight in fast-paced environments. Responsibilities include building detection content, tuning rules, and mentoring customers on SIEM usage, with travel planned for domestic engagements as needed.