Senior SIEM & Incident Response Engineer (Remote)

Empower AI; United States; Hybrid; USD 87,000 - 135,000; Full time

Job summary

Empower AI seeks a Senior Cybersecurity Incident Response Administrator to lead SIEM engineering across DoD/Army IT environments. You will deploy, monitor, and tune SIEM infrastructure, build dashboards for near real-time threat visibility, and support audits and security controls.

The role offers remote-eligible work with preference for Roanoke, VA area but can be performed remotely or hybrid. Candidates must have active DoD Secret clearance, 10+ years in cyber incident response, and relevant

Qualifications

• 10+ years in cybersecurity and incident response
• Active DoD Secret clearance
• Experience managing SIEM systems and dashboards
• Knowledge of DoD/Army security standards
• Bachelor's degree or equivalent experience

Responsibilities

• Deploy, install, monitor SIEM infrastructure per DoD requirements.
• Create SIEM dashboards for near real-time threat visibility.
• Monitor dashboards, investigate events, escalate as needed.
• Develop reporting requirements for audits and controls.
• Provide PKI support and monitor web app security standards.
• Coordinate with Army Cyber Service Providers for logs.
• Review CTOs and ensure security-compliant design reviews.

Skills

SIEM engineering

Dashboard creation

Threat detection

Incident response

Team collaboration

Education

Bachelor's degree in Computer Science

Equivalent years of cybersecurity and incident response experience

Tools

SIEM platforms

PKI management

SSL/TLS certificates

Army DoD security standards

Job description

Empower AI seeks a Senior Cybersecurity Incident Response Administrator to lead SIEM engineering across DoD/Army IT environments. You will deploy, monitor, and tune SIEM infrastructure, build dashboards for near real-time threat visibility, and support audits and security controls.

The role offers remote-eligible work with preference for Roanoke, VA area but can be performed remotely or hybrid. Candidates must have active DoD Secret clearance, 10+ years in cyber incident response, and relevant