Senior SIEM Engineer: Platform, Automation & Security Ops

ECS Corporate Services; Fairfax (VA); On-site; USD 120,000 - 170,000; Full time

Job summary

ECS Corporate Services seeks a Senior SIEM Engineer to design, deploy, and optimize enterprise SIEM platforms across cloud, on-premises, and hybrid environments. You will support telemetry integrations and data pipelines, driving reliability and security operations in collaboration with SOC teams.

Ideal candidates have 5+ years in security engineering with hands-on experience across Elastic, CrowdStrike, Splunk, and Microsoft Sentinel, plus scripting skills for automation.

Qualifications

• Bachelor's degree in computer science, information security, or a related field. Will consider experience in lieu of a degree.

Responsibilities

• Engineer, deploy, configure, maintain, and optimize enterprise SIEM platforms across cloud, on-premises, and hybrid environments.
• Support SIEM infrastructure components: collectors, aggregators, data nodes, forwarders, agents, connectors, APIs.
• Design, configure, and maintain integrations for security telemetry from endpoints, network devices, cloud environments, applications, OSs.
• Configure data collection, forwarding, parsing, normalization, enrichment, filtering, and routing for reliable telemetry.
• Perform SIEM platform upgrades, patches, and lifecycle management with minimal disruption.
• Monitor SIEM health, ingestion pipelines, storage, and capacity; optimize performance.
• Lead complex troubleshooting and root-cause analysis; coordinate with vendors as needed.
• Maintain and optimize SIEM configurations; follow change-management processes.
• Support security operations with telemetry for monitoring, investigation, threat hunting, and incident response.
• Collaborate with stakeholders to define requirements and coordinate engineering activities.
• Mentor junior engineers and document procedures and runbooks.
• Engage vendors for support and upgrade activities.
• Identify opportunities to improve reliability, automation, and scalability.

Skills

SIEM Engineering

Cloud & Hybrid

Scripting & Automation

Incident Response

Education

Bachelor's degree in CS or InfoSec

Tools

Elastic Security

CrowdStrike Falcon

Splunk Enterprise Security

Microsoft Sentinel

Job description

ECS Corporate Services seeks a Senior SIEM Engineer to design, deploy, and optimize enterprise SIEM platforms across cloud, on-premises, and hybrid environments. You will support telemetry integrations and data pipelines, driving reliability and security operations in collaboration with SOC teams.

Ideal candidates have 5+ years in security engineering with hands-on experience across Elastic, CrowdStrike, Splunk, and Microsoft Sentinel, plus scripting skills for automation.