SIEMEngineer

Hadiamondstar Software Solutions LLC; Washington (District of Columbia); On-site; USD 130,000 - 170,000; Full time

Job summary

Hadiamondstar Software Solutions LLC in Washington, DC seeks a senior cybersecurity professional to lead SIEM operations, including Splunk SPL, data ingestion, dashboards, and platform troubleshooting in enterprise environments. The role requires 5+ years in IT/cybersecurity and hands-on SIEM administration.

You will onboard log sources, optimize telemetry flows, and collaborate across teams to detect threats, craft queries, and ensure data quality; strong Linux/Windows systems knowledge and

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related technical discipline (4 years experience in lieu of degree)
• 5+ years experience relevant IT/cybersecurity experience.
• 3+ years of hands-on SIEM administration experience supporting enterprise or similarly complex environments.
• Hands-on experience with Splunk Enterprise, including SPL, data ingestion, forwarders, indexes, searches, dashboards, alerts, and platform troubleshooting.
• Experience onboarding and troubleshooting enterprise log sources and understanding telemetry flow from source systems through collection, ingestion, indexing, and search.
• Working knowledge of SQL and experience querying data for analysis, troubleshooting, validation, or reporting.
• Experience with or working knowledge of Elastic, Elasticsearch, Kibana, or comparable search and analytics technologies, with the ability to rapidly develop deeper Elastic expertise.
• Understanding of enterprise logging concepts, including collection, parsing, normalization, enrichment, indexing, retention, and data quality.
• Strong Linux command-line skills and working knowledge of Windows/Linux systems, networking, and common protocols such as TCP/IP, DNS, HTTP/HTTPS, TLS, and syslog.
• Familiarity with enterprise cybersecurity technologies such as EDR, firewalls, IDS/IPS, identity systems, and vulnerability management platforms.
• Demonstrated ability to independently troubleshoot technical problems, analyze unfamiliar data, test assumptions, identify root causes, and develop practical solutions.
• Strong technical curiosity, ownership, accountability, and ability to learn new technologies, platforms, and query languages.
• Strong written and verbal communication skills with the ability to document technical processes and collaborate effectively across teams.

Skills

Communication skills

Analytical thinking

Problem solving

Ownership & accountability

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or related technical discipline

Tools

Splunk Enterprise

Elastic Stack

SQL

Linux

Windows

Networking (TCP/IP)

Job description

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related technical discipline (4 years experience in lieu of degree)
• 5+ years experience relevant IT/cybersecurity experience.
• 3+ years of hands-on SIEM administration experience supporting enterprise or similarly complex environments.
• Hands-on experience with Splunk Enterprise, including SPL, data ingestion, forwarders, indexes, searches, dashboards, alerts, and platform troubleshooting.
• Experience onboarding and troubleshooting enterprise log sources and understanding telemetry flow from source systems through collection, ingestion, indexing, and search.
• Working knowledge of SQL and experience querying data for analysis, troubleshooting, validation, or reporting.
• Experience with or working knowledge of Elastic, Elasticsearch, Kibana, or comparable search and analytics technologies, with the ability to rapidly develop deeper Elastic expertise.
• Understanding of enterprise logging concepts, including collection, parsing, normalization, enrichment, indexing, retention, and data quality.
• Strong Linux command-line skills and working knowledge of Windows/Linux systems, networking, and common protocols such as TCP/IP, DNS, HTTP/HTTPS, TLS, and syslog.
• Familiarity with enterprise cybersecurity technologies such as EDR, firewalls, IDS/IPS, identity systems, and vulnerability management platforms.
• Demonstrated ability to independently troubleshoot technical problems, analyze unfamiliar data, test assumptions, identify root causes, and develop practical solutions.
• Strong technical curiosity, ownership, accountability, and ability to learn new technologies, platforms, and query languages.
• Strong written and verbal communication skills with the ability to document technical processes and collaborate effectively across teams.

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related technical discipline (4 years experience in lieu of degree)
• 5+ years experience relevant IT/cybersecurity experience.
• 3+ years of hands-on SIEM administration experience supporting enterprise or similarly complex environments.
• Hands-on experience with Splunk Enterprise, including SPL, data ingestion, forwarders, indexes, searches, dashboards, alerts, and platform troubleshooting.
• Experience onboarding and troubleshooting enterprise log sources and understanding telemetry flow from source systems through collection, ingestion, indexing, and search.
• Working knowledge of SQL and experience querying data for analysis, troubleshooting, validation, or reporting.
• Experience with or working knowledge of Elastic, Elasticsearch, Kibana, or comparable search and analytics technologies, with the ability to rapidly develop deeper Elastic expertise.
• Understanding of enterprise logging concepts, including collection, parsing, normalization, enrichment, indexing, retention, and data quality.
• Strong Linux command-line skills and working knowledge of Windows/Linux systems, networking, and common protocols such as TCP/IP, DNS, HTTP/HTTPS, TLS, and syslog.
• Familiarity with enterprise cybersecurity technologies such as EDR, firewalls, IDS/IPS, identity systems, and vulnerability management platforms.
• Demonstrated ability to independently troubleshoot technical problems, analyze unfamiliar data, test assumptions, identify root causes, and develop practical solutions.
• Strong technical curiosity, ownership, accountability, and ability to learn new technologies, platforms, and query languages.
• Strong written and verbal communication skills with the ability to document technical processes and collaborate effectively across teams.

Preferred Qualifications

• Hands-on experience with Elastic Stack / Elastic Security, including Elasticsearch, Kibana, Elastic Agent/Fleet, Beats, or Logstash.
• Experience with KQL, ES|QL, EQL, Query DSL, or comparable search and analytics languages.
• Experience supporting a SIEM migration, particularly Splunk-to-Elastic or a comparable enterprise migration.
• Experience with Splunk ES, Splunk CIM, Elastic Common Schema (ECS), or distributed Splunk environments.
• Experience with security detection engineering, correlation rules, alert tuning, threat hunting, or MITRE ATT&CK.
• Experience with scripting or automation using Python, PowerShell, Bash, REST APIs, or similar technologies.
• Experience working in or closely supporting a Security Operations Center (SOC).
• Relevant technical certifications such as Splunk, Elastic, Security+, CySA+, GSEC, or comparable certifications.