SIEM Engineer - 174035

ZP Group; Newington (VA); On-site; USD 95,000 - 140,000; Full time

Benefits offered by this job

PTO

Medical benefits

401K

Job summary

Zachary Piper Solutions is seeking a SIEM Engineer to support a cybersecurity operations-focused team in Newington, VA. This on-site role involves designing, optimizing, and maintaining security monitoring capabilities to enable proactive threat detection and incident response.

The SIEM Engineer will work with Splunk Enterprise Security and IBM QRadar, developing detection content, tuning alerts, and correlating events across Windows, Linux, network, and cloud sources.

Qualifications

• 3+ years of experience in SIEM engineering or related cyber defense function.
• Hands-on experience with SIEM platforms, log management, event correlation, alert tuning, and security analytics tools.
• Strong understanding of security logs, networking protocols (TCP/IP, DNS, HTTP/S), and scripting (Python, Bash, PowerShell).
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field (or equivalent).
• Active TS/SCI security clearance.

Responsibilities

• Configure, maintain, and optimize SIEM platforms such as Splunk Enterprise Security and IBM QRadar.
• Develop and enhance SIEM use cases, detection content, correlation rules, and alerting logic.
• Analyze and correlate security events across data sources including Windows, Linux, network, firewall, IDS/IPS, and cloud environments.
• Tune alerts and improve monitoring to reduce false positives and increase threat detection effectiveness.
• Support incident investigations, threat hunting, and integration of threat intelligence data.

Skills

SIEM platforms

Log management

Event correlation

Alert tuning

Security analytics

Python scripting

PowerShell

Bash scripting

TCP/IP

NIST framework

MITRE ATT&CK

Education

Bachelor’s degree in Cybersecurity, IT, CS or related

Tools

Splunk Enterprise Security

IBM QRadar

Job description

Zachary Piper Solutions is seeking a SIEM Engineer to support a company focused on cybersecurity operations, threat detection, and enterprise security monitoring within a secure government environment. This position is on-site in Newington, VA. The SIEM Engineer will design, optimize, and maintain security monitoring capabilities that enable proactive threat detection and incident response. Join a mission-driven team protecting critical systems and infrastructure through advanced cybersecurity operations.

Responsibilities for the SIEM Engineer include:

• Configure, maintain, and optimize SIEM platforms such as Splunk Enterprise Security and IBM QRadar
• Develop and enhance SIEM use cases, detection content, correlation rules, and alerting logic
• Analyze and correlate security events across multiple data sources, including Windows, Linux, network, firewall, IDS/IPS, and cloud environments
• Tune alerts and improve monitoring capabilities to reduce false positives and increase threat detection effectiveness
• Support incident investigations, threat hunting activities, and integration of threat intelligence data

Required Qualifications for the SIEM Engineer include:

• 3+ years of experience in SIEM engineering, cybersecurity monitoring, security analytics, or a related cyber defense function
• Hands-on experience with SIEM platforms, log management, event correlation, alert tuning, and security analytics tools
• Strong understanding of security logs, networking protocols (TCP/IP, DNS, HTTP/S), cybersecurity frameworks such as NIST and MITRE ATT&CK, and scripting with Python, Bash, or PowerShell
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field (or equivalent experience)
• Active TS/SCI security clearance

Compensation for the SIEM Engineer include:

• Salary Range: Competitive; depending on experience
• Full Benefits Package: PTO, Paid Holidays, Medical, Dental, Vision, 401K, Tuition Reimbursement, Sick Leave as required by law

#LI-MC1 #LI-ONSITE

SEO Keywords

SIEM Engineer

Cybersecurity Engineer

Security Monitoring

Security Analytics

Splunk Enterprise Security

IBM QRadar

SIEM Administration

Threat Detection

Event Correlation

Log Management

Alert Tuning

Detection Engineering

SOC Analyst

Cyber Defense

Threat Hunting

Security Operations Center

Windows Security Logs

Linux Security Logs

IDS/IPS

Network Security

Python Scripting

PowerShell

Bash Scripting

TCP/IP

DNS

HTTP/S

NIST Framework

MITRE ATT&CK

Cloud Security Monitoring

AWS Security

Azure Security

GCP Security

SOAR

Threat Intelligence

TS/SCI Clearance

DoD Cybersecurity

Federal Cybersecurity Jobs

Security Engineer

Cybersecurity Monitoring Analyst