Senior SIEM & Detection Engineering Lead

K2United, LLC.; Washington (District of Columbia); On-site; USD 150,000 - 190,000; Full time

Job summary

K2United, LLC is seeking a senior security engineering leader in Washington, DC to own SIEM monitoring, telemetry validation, and detection engineering across platforms. You will supervise engineering staff and collaborate with NOC/SOC to improve coverage, reduce false positives, and ensure baseline configurations align with CIS/NIST benchmarks.

The role requires hands-on Splunk experience, Defender for Endpoint/Servers, and preferred exposure to SASE or ZTNA with Zscaler. U.S.

Qualifications

• Eight+ years in security engineering with 3+ years leading SIEM administration and detection engineering.
• Hands-on SIEM engineering depth including data onboarding, field extraction, normalization, and content lifecycle management.
• Proven experience tuning EDR and WAF/CDN detection policies to reduce false positives.

Responsibilities

• Administer, configure, sustain, and optimize SIEM capabilities and monitoring functions.
• Onboard data sources, normalize telemetry, expand visibility, and strengthen correlation logic.
• Provide engineering support for log management, alert tuning, and incident analytics improvements.
• Maintain security tools and detections with high signal quality in coordination with NOC/SOC.

Skills

SIEM administration

Detection engineering

Data onboarding

Telemetry validation

Engineering leadership

Audit readiness

Education

Bachelor's degree in CS/Engineering

Tools

Splunk

Microsoft Defender

Zscaler

Job description

K2United, LLC is seeking a senior security engineering leader in Washington, DC to own SIEM monitoring, telemetry validation, and detection engineering across platforms. You will supervise engineering staff and collaborate with NOC/SOC to improve coverage, reduce false positives, and ensure baseline configurations align with CIS/NIST benchmarks.

The role requires hands-on Splunk experience, Defender for Endpoint/Servers, and preferred exposure to SASE or ZTNA with Zscaler. U.S.