Remote SIEM Engineer: Detection & Content Architect

Relha LLC; Washington, Northern (District of Columbia, KY); Hybrid; USD 89,000 - 163,000; Full time

Job summary

Deloitte’s Cyber Defense and Resilience practice seeks a SIEM Engineer to build and optimize SIEM content, improve alert fidelity, and support security monitoring across enterprise environments. The role emphasizes detection engineering, incident analysis, and collaboration with distributed teams using Splunk, Palo Alto XSIAM, or CrowdStrike NG SIEM.

Ideal candidates have 2+ years in security operations or SIEM engineering, a bachelor’s degree in a related field, and relevant certifications.

Qualifications

• Bachelor’s degree in computer science, cybersecurity, IT, engineering, or related field.
• 2+ years of cybersecurity/security operations/SIEM engineering experience.
• 2+ years with Splunk, Palo Alto XSIAM, or CrowdStrike NG SIEM.

Responsibilities

• Configure, maintain, and optimize SIEM content including correlation rules, alerts, dashboards, and reports.
• Analyze security events and log data to identify suspicious activity and support investigations.
• Integrate and normalize log sources from endpoint, network, cloud, identity, and security platforms.
• Partner with cybersecurity teams to support use case development, threat detection, and incident triage.
• Document detection logic, procedures, and monitoring requirements.

Skills

SIEM engineering

Independent work

Team collaboration

Communication

Attention to detail

Leadership

Education

Bachelor’s degree in CS/IT/Cybersecurity or related field

Tools

Splunk

Palo Alto XSIAM

CrowdStrike NG SIEM

Job description

Deloitte’s Cyber Defense and Resilience practice seeks a SIEM Engineer to build and optimize SIEM content, improve alert fidelity, and support security monitoring across enterprise environments. The role emphasizes detection engineering, incident analysis, and collaboration with distributed teams using Splunk, Palo Alto XSIAM, or CrowdStrike NG SIEM.

Ideal candidates have 2+ years in security operations or SIEM engineering, a bachelor’s degree in a related field, and relevant certifications.