Senior SIEM Engineer — Splunk & Threat Analytics

Leidos; Maryland; On-site; USD 131,000 - 237,000; Full time

Benefits offered by this job

Competitive benefits

Paid Time Off

11 paid Holidays

401K with 6% company match

Flexible Schedules

Education and Training Support

Parental Paid Leave

Job summary

Leidos is seeking an experienced SIEM Engineer to join a high‑performing agile team supporting a large, complex program. The role focuses on configuring event data collection, parsing, correlation, and visualization to generate actionable insights for analysts and improve monitoring accuracy across a DevOps environment.

The candidate will design dashboards, manage data ingestion, and collaborate across teams to reduce false positives/negatives while maintaining robust audit capabilities and

Qualifications

• Bachelor’s degree in Computer Science, Software Engineering, Network Engineering, or a related field.
• At least 5 years of experience with one or more of the following technologies: StealthWatch, TripWire, Zenoss, ArcSight, Splunk.
• Must have experience in the engineering and administration of Splunk.
• Hands‑on experience implementing, and supporting Splunk multi‑site clusters, including indexer clustering, site awareness, replication/search factors, and cross‑site failover.
• Experience designing, implementing, and supporting Splunk core components, including indexers, forwarders, search heads, and cluster managers.
• Experience configuring and administering Splunk data ingestion and forwarding for both new and existing applications and data sources.
• Proven ability to troubleshoot Splunk dataflow issues across core platform components.
• Experience configuring and deploying data collection across a variety of operating systems and network platforms.
• In‑depth experience creating Dashboards and Analytics within SIEM tools.
• Experience working with monitoring systems that support auditing, incident response, and system health monitoring.
• Must have a solid understanding of network components, devices, ports, protocols, and basic networking troubleshooting steps.
• Demonstrated ability to troubleshoot issues related to log feeds, search performance, and field extractions.
• Must have the ability to resolve issues related to data solutions and data quality.
• Clearance Required: Must have TS/SCI with Polygraph.

Responsibilities

• Configure the collection, parsing, correlation, and visualization of event data for a critical operational system.
• Support the configuration of systems used by analysts and end users, and the collection/extraction of data for reports, analytics, and dashboards.
• Contribute to the design and development of reporting solutions based on end-user requirements and improve audit data quality.

Skills

Splunk

ArcSight

Zenoss

StealthWatch

TripWire

Threat detection

Dashboards

SIEM tooling

Log management

Networking basics

Education

Bachelor’s degree in Computer Science / Software / Network Engineering or related field

Job description

Leidos is seeking an experienced SIEM Engineer to join a high‑performing agile team supporting a large, complex program. The role focuses on configuring event data collection, parsing, correlation, and visualization to generate actionable insights for analysts and improve monitoring accuracy across a DevOps environment.

The candidate will design dashboards, manage data ingestion, and collaborate across teams to reduce false positives/negatives while maintaining robust audit capabilities and