Senior SIEM Engineer - Splunk & Threat Analytics Lead

Leidos Inc; Corridor North (MD); On-site; USD 131,000 - 237,000; Full time

Benefits offered by this job

Competitive benefits

Flexible schedules

Education and training support

Parental paid leave

Job summary

Leidos is seeking a SIEM Engineer to join the Intel Sector's Cyber & Analytics Business Area (CABA). The role focuses on configuring data collection, parsing, correlation, and visualization of security event data to support mission-critical operations.

You will work in an agile SAFe environment, collaborating with cross-functional teams to deliver robust SIEM capabilities. The ideal candidate has a Bachelor's degree with 12+ years of related experience, strong Splunk expertise (including

Qualifications

• Bachelor's degree in CS/Software/Network Eng or related field with 12+ years of relevant experience.
• 5+ years of experience with StealthWatch, TripWire, Zenoss, ArcSight, or Splunk.
• Experience engineering and administering Splunk, including multi-site clusters and indexers.
• Strong knowledge of log management, event correlation, dashboards, and analytics in SIEM tools.
• Clearance required: TS/SCI with Polygraph.

Responsibilities

• Configure the collection, parsing, correlation, and visualization of event data for a critical operational system.
• Support the configuration of systems used by analysts and end users; enhance reports and dashboards.
• Design and develop reporting solutions based on end-user requirements.
• Collaborate across teams to improve audit data quality and reduce false positives/negatives.

Skills

Splunk

SAFe

Log management

Event correlation

System administration

Network troubleshooting

Dashboards & analytics

Education

Bachelor's degree in CS/Software/Network Eng or related field

Tools

StealthWatch

TripWire

Zenoss

ArcSight

Splunk

Job description

Leidos is seeking a SIEM Engineer to join the Intel Sector's Cyber & Analytics Business Area (CABA). The role focuses on configuring data collection, parsing, correlation, and visualization of security event data to support mission-critical operations.

You will work in an agile SAFe environment, collaborating with cross-functional teams to deliver robust SIEM capabilities. The ideal candidate has a Bachelor's degree with 12+ years of related experience, strong Splunk expertise (including