Remote Senior SIEM Engineer — Cloud & On-Prem

ECS; Richmond (VA); On-site; USD 120,000 - 170,000; Full time

Job summary

Everforth ECS seeks a SIEM Engineer III to join our team remotely. You will engineer, deploy, and optimize enterprise SIEM platforms such as Elastic Security, Splunk, CrowdStrike, and Microsoft Sentinel across cloud, on-prem, and hybrid environments.

Strong data integration and platform maintenance skills are required. The role requires five+ years in cybersecurity/SIEM, solid scripting ability, and experience with SIEM data workflows.

Qualifications

• At least five years of relevant cybersecurity, SIEM, security engineering, or systems engineering experience.
• Strong knowledge of SIEM concepts and hands-on experience with enterprise SIEM platforms.
• Experience deploying, configuring, maintaining, upgrading, and troubleshooting enterprise SIEM platforms and supporting infrastructure.

Responsibilities

• SIEM Platform Engineering: Engineer, deploy, configure, maintain, and optimize enterprise SIEM platforms across cloud, on-premises, and hybrid environments.
• SIEM Infrastructure Management: Support collectors, aggregators, data nodes, forwarders, agents, connectors, APIs, and other services.
• Log Source & Data Integration: Design and maintain integrations for security telemetry from endpoints, network devices, cloud environments, and apps.
• Data Pipeline Engineering: Configure and troubleshoot data collection, forwarding, parsing, normalization, enrichment, and routing for telemetry.

Skills

SIEM platforms

Security engineering

Data integration

Cloud security

Scripting

SIEM languages

Education

Bachelor’s degree in CS or related

Tools

Ansible

Terraform

Chef

Puppet

APIs

Job description

Everforth ECS seeks a SIEM Engineer III to join our team remotely. You will engineer, deploy, and optimize enterprise SIEM platforms such as Elastic Security, Splunk, CrowdStrike, and Microsoft Sentinel across cloud, on-prem, and hybrid environments.

Strong data integration and platform maintenance skills are required. The role requires five+ years in cybersecurity/SIEM, solid scripting ability, and experience with SIEM data workflows.