Senior SIEM Engineer (Splunk/Elastic) — Hybrid

SAIC; Washington (District of Columbia); Hybrid; USD 120,000 - 160,000; Full time

Job summary

SAIC is seeking a SIEM Engineer to support enterprise cybersecurity operations and the modernization of security monitoring capabilities. The role administers, engineers, and optimizes SIEM platforms in a federal environment.

The ideal candidate has hands-on SIEM administration experience, strong architectural knowledge, and the ability to troubleshoot complex issues while improving performance and reliability. Hybrid schedule: 3 days onsite, 2 days remote.

Qualifications

• Bachelor's degree or equivalent IT/cybersecurity experience.
• 9+ years IT/cybersecurity experience with at least 3 years SIEM admin/engineering.

Responsibilities

• Administer, maintain, engineer, and optimize enterprise SIEM platforms (Splunk ES, Elastic) with focus on availability, performance, and scalability.
• Design, configure, manage, and troubleshoot log collection and ingestion pipelines across systems and cloud services.
• Onboard and normalize security telemetry using CIM/ECS, develop detections, dashboards, and alerts with SPL/SQL/Elastic queries.
• Collaborate with analysts and engineers to improve visibility, data quality, and operational reporting.
• Ensure high availability, disaster recovery, and platform lifecycle management in federal environment.

Skills

SIEM administration

Splunk Enterprise

Elastic Stack

SPL

Python

Linux

Windows

SQL

Security fundamentals

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or related field

Tools

Splunk Enterprise

Elastic Stack

Job description

SAIC is seeking a SIEM Engineer to support enterprise cybersecurity operations and the modernization of security monitoring capabilities. The role administers, engineers, and optimizes SIEM platforms in a federal environment.

The ideal candidate has hands-on SIEM administration experience, strong architectural knowledge, and the ability to troubleshoot complex issues while improving performance and reliability. Hybrid schedule: 3 days onsite, 2 days remote.