Senior SIEM Engineer — Remote

ECS; Virginia (MN); On-site; USD 120,000 - 170,000; Full time

Job summary

Everforth ECS is seeking a SIEM Engineer III to design, deploy, and optimize enterprise SIEM platforms across cloud, on-prem, and hybrid environments. You will collaborate with Security Engineering, SOC, IT, and vendors to ensure reliable telemetry, scalable data pipelines, and secure operations.

You will mentor junior engineers, lead complex SIEM initiatives, document architectures and runbooks, and contribute to continuous improvement of SIEM processes and security visibility in a fast‑paced

Qualifications

• At least five years of relevant cybersecurity, SIEM, security engineering, or systems engineering experience.
• Strong knowledge of SIEM concepts and hands-on experience with one or more enterprise SIEM platforms such as Elastic Security, CrowdStrike Falcon Next-Gen SIEM, Splunk Enterprise Security, Microsoft Sentinel, or comparable technologies.
• Experience deploying, configuring, maintaining, upgrading, and troubleshooting enterprise SIEM platforms and supporting infrastructure.
• Experience integrating enterprise data sources and security technologies into SIEM platforms, including troubleshooting ingestion, connectivity, parsing, normalization, and data quality issues.
• Strong understanding of Windows and Linux operating systems and the infrastructure, networking, and security concepts required to support enterprise SIEM environments.
• Working knowledge of cloud environments and cloud-based security telemetry (AWS, Azure, Google Cloud).

Responsibilities

• SIEM Platform Engineering: Engineer, deploy, configure, maintain, and optimize enterprise SIEM platforms across cloud, on-premises, and hybrid environments.
• SIEM Infrastructure Management: Support collectors, aggregators, data nodes, forwarders, agents, connectors, APIs, and other services.
• Log Source & Data Integration: Design, configure, and maintain integrations for security telemetry from endpoints, networks, cloud, and applications.
• Data Pipeline Engineering: Configure and troubleshoot data collection, forwarding, parsing, normalization, enrichment, filtering, and routing.
• Platform Maintenance & Upgrades: Perform upgrades, patches, and migrations with minimal disruption.
• Performance & Health Monitoring: Monitor ingestion, storage, and system performance; preemptively remediate issues.
• Complex Troubleshooting: Lead root-cause analysis for SIEM issues and coordinate with vendors as needed.
• Documentation & Change Management: Create runbooks, architecture diagrams, and configuration standards.
• Vendor Management: Engage vendors to troubleshoot issues and assist with deployments or upgrades.
• Continuous Improvement: Identify opportunities to improve reliability, automation, and security capabilities.

Skills

SIEM engineering

Platform integration

Cloud security telemetry

Scripting (Python/PowerShell)

Strong problem solving

Education

Bachelor’s degree in computer science or information security

Tools

Elastic Security

CrowdStrike Falcon Next-Gen SIEM

Splunk Enterprise Security

Microsoft Sentinel

Job description

Everforth ECS is seeking a SIEM Engineer III to design, deploy, and optimize enterprise SIEM platforms across cloud, on-prem, and hybrid environments. You will collaborate with Security Engineering, SOC, IT, and vendors to ensure reliable telemetry, scalable data pipelines, and secure operations.

You will mentor junior engineers, lead complex SIEM initiatives, document architectures and runbooks, and contribute to continuous improvement of SIEM processes and security visibility in a fast‑paced