SIEM Engineer

SAIC · Washington

SIEM Engineer

SAIC is seeking a SIEM Engineer to support enterprise cybersecurity operations and the modernization of the agency's security monitoring and analytics capabilities. This position is responsible for administering, engineering, and optimizing enterprise Security Information and Event Management (SIEM) platforms within a mission-critical federal environment.

The ideal candidate combines strong hands-on SIEM administration experience with engineering and architectural knowledge. The successful candidate should be capable of independently troubleshooting complex technical problems, improving platform performance and reliability, and contributing to the design of scalable SIEM solutions. Strong analytical skills, technical curiosity, initiative, and a commitment to continuous improvement are essential.

HYBRID: 3 days onsite / 2 days remote

Responsibilities

Administer, maintain, engineer, and optimize enterprise SIEM platforms, including Splunk Enterprise, Splunk ES, and Elastic / Elastic Security, ensuring availability, performance, reliability, and scalability.
Support SIEM architecture and modernization initiatives, including the transition from Splunk to Elastic, migration of data sources and security use cases, infrastructure design, testing, validation, and operational cutover.
Design, configure, manage, and troubleshoot enterprise log collection and ingestion pipelines, including syslog, Windows Event Collection/Forwarding, SIEM agents and forwarders, network devices, security technologies, applications, databases, and cloud services.
Onboard and normalize security telemetry, ensuring accurate collection, parsing, enrichment, indexing, retention, and searchability using applicable standards such as Splunk Common Information Model (CIM) and Elastic Common Schema (ECS).
Develop, maintain, migrate, and optimize SIEM searches, dashboards, reports, alerts, correlation rules, and security detections using SPL, SQL, and Elastic query technologies.
Monitor and optimize SIEM infrastructure health, ingestion performance, storage utilization, system capacity, and data availability while supporting high availability, disaster recovery, and scalability requirements.
Troubleshoot complex SIEM and logging issues across the complete data path, identify root causes, and implement sustainable solutions to improve reliability and operational effectiveness.
Support SIEM architecture, configuration management, security hardening, change control, automation, and platform lifecycle management in accordance with enterprise and federal requirements.
Collaborate with security analysts, infrastructure teams, application owners, and cybersecurity leadership to improve security visibility, detection capabilities, data quality, and operational reporting.
Develop and maintain technical documentation, including architecture diagrams, data flow diagrams, configuration standards, SOPs, and migration procedures, while providing technical guidance to other team members.
Evaluate emerging SIEM technologies and capabilities, identify opportunities for engineering improvements, and recommend solutions that improve performance, automation, scalability, and operational efficiency.
Take ownership of assigned technical initiatives, communicate progress and risks, and independently drive technical issues and projects through resolution.

SAIC® is a premier mission integrator focused on advancing the power of technology and innovation to serve and protect our world. Our robust portfolio of offerings across the defense, space, intelligence, and civilian markets includes secure high-end solutions in mission IT, enterprise IT, engineering services, and professional services. We integrate emerging technology, rapidly and securely, into mission critical operations that modernize and enable critical national imperatives.

We are approximately 23,000 strong; driven by mission, united by purpose, and inspired by opportunities. SAIC is an Equal Opportunity Employer. Headquartered in Reston, Virginia, SAIC has annual revenues of approximately $7.3 billion. For more information, visit saic.com. For ongoing news, please visit our newsroom.

More jobs at SAIC · Software Engineering jobs in Washington DC