Senior SIEM Engineer — Remote

ecsfederal; Virginia (MN); Hybrid; USD 120,000 - 170,000; Full time

Job summary

Everforth ECS in the United States is seeking an experienced SIEM Engineer III to design, implement, and optimize enterprise SIEM platforms across cloud, on-prem, and hybrid environments. You will work with Elastic Security, CrowdStrike Falcon Next-Gen SIEM, Splunk Enterprise Security, and Microsoft Sentinel.

The role emphasizes senior technical leadership, complex troubleshooting, data-source integration, and collaboration with SOC analysts and IT teams to ensure effective security monitoring

Qualifications

• Bachelor’s degree in computer science, information security, or a related field; degree preferred.
• At least five years of cybersecurity/SIEM experience.
• Experience with enterprise SIEM platforms and data source integrations.

Responsibilities

• Engineer, deploy, configure, and optimize enterprise SIEM platforms across environments.
• Manage data ingestion, parsing, normalization, and enrichment for telemetry sources.
• Perform upgrades, patches, and lifecycle management with minimal disruption.
• Provide technical guidance and mentoring to junior engineers.
• Collaborate with SOC and IT teams to support monitoring and incident response.

Skills

SIEM Platform Engineering

Data Integration

Cloud & Hybrid Environments

Scripting & Automation

Windows & Linux

Vendor Collaboration

Education

Bachelor’s degree in computer science or related field

Tools

Elastic Security

CrowdStrike Falcon Next-Gen SIEM

Splunk Enterprise Security

Microsoft Sentinel

Job description

Everforth ECS in the United States is seeking an experienced SIEM Engineer III to design, implement, and optimize enterprise SIEM platforms across cloud, on-prem, and hybrid environments. You will work with Elastic Security, CrowdStrike Falcon Next-Gen SIEM, Splunk Enterprise Security, and Microsoft Sentinel.

The role emphasizes senior technical leadership, complex troubleshooting, data-source integration, and collaboration with SOC analysts and IT teams to ensure effective security monitoring