Senior SIEM & Security Monitoring Engineer

K2Share LLC; Washington (District of Columbia); On-site; USD 140,000 - 190,000; Full time

Job summary

K2United, LLC is seeking an experienced Security Engineer to lead SIEM operations, detection engineering, and telemetry initiatives across the enterprise. You’ll own monitoring health, data onboarding, and tuning for improved threat detection.

The role requires hands-on engineering with Splunk and Defender, strong baseline development against CIS/NIST, and collaboration with NOC/SOC in a 24x7 environment.

Qualifications

• Bachelor's degree or equivalent experience.
• Eight+ years in security engineering with SIEM leadership.
• Hands-on Splunk engineering for threat hunting and data onboarding.
• Experience tuning EDR and WAF/CDN detections to reduce false positives.

Responsibilities

• Administer, configure, sustain, enhance, and optimize SIEM capabilities and monitoring functions.
• Onboard and integrate new data sources; normalize telemetry; expand visibility coverage and correlation logic.
• Provide engineering support for log management, data handling, alert tuning, detection optimization, and analytics.
• Identify gaps in visibility or monitoring; drive corrective actions to closure.
• Maintain security tools and detections with high signal state; coordinate with NOC/SOC.
• Normalize telemetry from data sources including Zscaler SASE and Microsoft Defender.
• Support configuration management by monitoring security control effectiveness and drift.
• Develop and maintain monitoring procedures, baselines, and implementation guidance.
• Provide oversight of security engineering staff and architecture improvements.
• Develop baselines against CIS/NIST benchmarks and remediate drift.

Skills

Security engineering

SIEM administration

Detection engineering

Data onboarding

Telemetry validation

EDR tuning

Threat hunting

NIST/CIS baseline

Education

Bachelor's degree or equivalent

Tools

Splunk

Microsoft Defender

Zscaler

Job description

K2United, LLC is seeking an experienced Security Engineer to lead SIEM operations, detection engineering, and telemetry initiatives across the enterprise. You’ll own monitoring health, data onboarding, and tuning for improved threat detection.

The role requires hands-on engineering with Splunk and Defender, strong baseline development against CIS/NIST, and collaboration with NOC/SOC in a 24x7 environment.