Senior SIEM Engineer: Hybrid Splunk & Elastic

SAIC; Washington (District of Columbia); Ibrido; USD 140.000 - 200.000; Tempo pieno

Descrizione del lavoro

SAIC is seeking a SIEM Engineer to support enterprise cybersecurity operations and modernization of security monitoring and analytics within a federal environment. The role combines hands-on SIEM administration with engineering and architectural responsibilities to deliver scalable, reliable SIEM solutions.

The candidate should troubleshoot complex problems, improve platform performance, and drive automation and optimization efforts across Splunk and Elastic deployments in a hybrid onsite/remote

Competenze

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or related field or equivalent IT/cybersecurity experience.
• 9+ years of IT/cybersecurity experience with at least 3 years hands-on SIEM administration or engineering.
• Ability to obtain and maintain a Public Trust requiring U.S. Citizenship.
• Hands-on experience with Splunk Enterprise and working knowledge of Elastic or similar search/analytics tech.

Mansioni

• Administer, maintain, engineer, and optimize enterprise SIEM platforms (Splunk, Elastic) for availability, performance, and scalability.
• Support SIEM architecture modernization, including migration from Splunk to Elastic and data-source integration.
• Design and manage log collection pipelines (syslog, Windows Event Collection, SIEM agents, network devices, cloud services).
• Onboard and normalize security telemetry using CIM and ECS standards.
• Develop and optimize SIEM searches, dashboards, alerts, and detections using SPL and Elastic queries.
• Monitor SIEM health, storage, capacity, and DR readiness; ensure high availability.
• Troubleshoot data-path issues, identify root causes, implement durable fixes.
• Assist with configuration management, security hardening, automation, and lifecycle management.
• Collaborate with security analysts and leadership to improve visibility, detections, and reporting.
• Create architecture diagrams, data-flow docs, SOPs, migration procedures; mentor teammates.
• Evaluate new SIEM technologies and propose engineering improvements.
• Own assigned technical initiatives and drive them to resolution.

Conoscenze

SIEM administration

Splunk

Elastic

Linux

Windows

Python

PowerShell

SPL

Formazione

Bachelor's degree in Cybersecurity

Strumenti

Splunk Enterprise

Elastic Stack

Kibana

Logstash

SQL

SPL

Descrizione del lavoro

SAIC is seeking a SIEM Engineer to support enterprise cybersecurity operations and modernization of security monitoring and analytics within a federal environment. The role combines hands-on SIEM administration with engineering and architectural responsibilities to deliver scalable, reliable SIEM solutions.

The candidate should troubleshoot complex problems, improve platform performance, and drive automation and optimization efforts across Splunk and Elastic deployments in a hybrid onsite/remote