SIEM Engineer

SIEM Engineer

As required by our governmental client, this position requires being a US Citizen AND an active DOE Q or Top Secret clearance or the ability to obtain a DOE Q or Top Secret clearance to be considered.

The SIEM Engineer will join the Enterprise Detection Engineering team to enhance the Security Operations Center's capabilities in detecting threats and intrusions. Responsibilities include Splunk development, system deployment, app implementation, data onboarding, and integrations. Using DevOps and Agile methodologies, the role involves collaborating with Engineering teams to design and implement automated processes for timely solution delivery. A strong IT background, including Linux administration knowledge, is beneficial.

Compensation & Benefits:

Estimated Starting Salary Range for SIEM Engineer: $80,000 to $110,000

Pay commensurate with experience.

Full time benefits include Medical, Dental, Vision, 401K, and other possible benefits as provided. Benefits are subject to change with or without notice.

SIEM Engineer Responsibilities Include:

• Work closely with SOC, Architecture, Engineering, and project stakeholders to deliver needed solutions in a timely manner.
• Develop and maintain detailed technical documentation which includes solution requirements, use cases, system dependencies, test plans, build and deployment processes, usage guides, build artifacts, and release notes.
• Collaboratively design and implement custom SIEM solutions which satisfy project requirements.
• Work with Splunk Engineers, Security Engineers, and other facets of engineering to coach and mentor in SIEM best practices, troubleshooting, and other SIEM issues that arise
• Complete given tasks by management and federal leadership to support the NNSA Mission
• Implement, maintain, and support 24x7x365 SIEM operations for SOC monitoring and alerting
• Serve as the final POC for SIEM troubleshooting and issues before SIEM Vendor Support is engaged
• Conduct continuous health monitoring of Splunk clusters and environment as day-to-day tasks and solve issues as they are discovered/alerted
• Stay up-to-date on the latest SIEM best practices, troubleshooting steps, and known issues with SIEM technology to ensure continued operations
• Performs other job-related duties as assigned

SIEM Engineer Experience, Education, Skills, Abilities requested:

• Bachelor's Degree in Computer Science, Information Systems, or related field, or 4 years of relevant IT experience.
• Five years of experience in Security/DevOps engineering, with expertise in deploying, configuring, and managing clustered SIEM environments.
• Skilled in troubleshooting SIEM methodologies, data ingestion, logging, and on-boarding data sources.
• Proficient in using DevOps tools (Jira, Git, Jenkins, Ansible) and scripting (Bash, Python, PowerShell).
• Experience with SIEM health monitoring, virtualization, and compliance frameworks.
• Strong networking, IT background, and excellent communication skills. Must obtain NICE 800-181 certification (e.g., CISM, CCISO, CISSP) within six months.
• Certifications:
  
  
  
  • CySA+
  • Security+
  • Splunk Certified Admin
  • Splunk Certified Power User
  
  
• Must pass pre-employment qualifications of Cherokee Federal

Company Information:

Criterion is a part of Cherokee Federal - the division of tribally owned federal contracting companies owned by Cherokee Nation Businesses. As a trusted partner for more than 60 federal clients, Cherokee Federal LLCs are focused on building a brighter future, solving complex challenges, and serving the government's mission with compassion and heart. To learn more about Criterion, visit cherokee-federal.com.

#CherokeeFederal #LI-RA1

Cherokee Federal is a military friendly employer. Veterans and active military transitioning to civilian status are encouraged to apply.

Similar searchable job titles:

• Splunk Engineer
• Cybersecurity Data Analyst
• Big Data Security Specialist
• DevSecOps Engineer
• Security Information and Event Management (SIEM) Engineer

Keywords:

• Splunk
• Cybersecurity
• Big Data
• DevOps
• Automation

Legal Disclaimer: Cherokee Federal is an equal opportunity employer. Please visit cherokee-federal.com/careers for information regarding our Affirmative Action and Equal Opportunity Employer Statement, and Accommodation request.

Many of our job openings require access to government buildings or military installations. Candidates must pass pre-employment qualifications of Cherokee Federal.