Quick overview
Job description
We are hiring a Elastic SIEM Engineer to join our team to support the DCSA location at 7121 Standard Drive in Hanover, MD (Fort Meade). This is a hybrid position 2 days onsite every week.
An active Secret OR Top secret is required. We are hiring a SIEM Engineer to support onsite in Hanover MD. This position has been approved for hybrid support (2 days onsite/3 days remote). Elastic SIEM Duties & Responsibilities Duties & Responsibilities for this position include:
- This is a technical, hands-on role responsible for the successful operation of a variety of cybersecurity tools, logging framework, and cybersecurity infrastructure
- Support written technical deliverables for customers and build new capabilities
- Contributions to infrastructure, data pipeline, analytics dashboards, and other resources will be delivered to threat analysts for consumption
- Enhance the Joint Staff’s ability to secure systems and networks through implementation of the Elastic product family’s SIEM tool
- Facilitate data ingestion of logs including Extract, Transform, and Load (ETL) functions to develop dashboards, visualization, and alerting
- Create Standard Operation Procedures (SOPs) and perform index administration, maintenance and optimization
- Develop daily and weekly PowerPoint presentations to brief management and the team
- Ability to analyze security vulnerability reports and develop/implement a plan to mitigate critical vulnerabilities.
- Experience with developing automated capabilities for securing environments.
- STIG compliance and vulnerability management
- Knowledge of JFQ DoDIN DoD 8510.01 RMF IA Controls (IACs) and implementation.
- Engagement with avenues of influence (Splunk product managers, user groups, ) to align platform capabilities with business requirements
- Requires an extensive knowledge of application or infrastructure systems architecture, usually having experience with multiple system technologies
- Recognizes and seizes opportunities to improve products, services or approaches
- Design, document, build, secure, and maintain Elastic Stack solutions deployed in the Cloud or on-premises
- Experience using SIEM/SORN technologies Elastic SIEM Qualifications Education
- Bachelor's degree in Information Security or related field and/or equivalent combination of experience. Experience
- 5+ years of experience in information technology or security engineering
- 3+ years of direct Elastic administration experience Certification
- DoD 8140/8570 IAT Level II/III certifications required
- One or more certifications: o GIAC Certified Detection Analyst (GCDA) o CompTIA Cybersecurity Analyst (CySA+) o Elastic Certified Engineer o Elastic Certified Analyst o Elastic Certified Observability Engineer o Certified SOC Analyst (EC-CSA) o Security+ Clearance • Minimum Secret
- Ability to obtain and maintain Top Security/SCI clearance
Similar jobs
- LO
Mission Manager / Systems Engineer IIRecently posted Auto Apply
Lodestar · Los Angeles · Hybrid 🇺🇸
MATLABPythonTechnology$115k - $174k/yr - SN

Principal Software Engineer - ObservabilityRecently posted Auto Apply
Snowflake · US-CA-Menlo Park · Hybrid 🇺🇸
AWSSnowflakeC+++3TechnologySalary not listed - WA

Developer AdvocateRecently posted Auto Apply
Wafer · San Francisco · On-site 🇺🇸
OnboardingLLMVercelTechnologySalary not listed - BR

Staff Software Engineer, ApplicationsRecently posted Auto Apply
Brain Corp · San Diego · Hybrid 🇺🇸
RoboticsDeep LearningC+++2Technology$187.2k - $234.0k/yr - RO

DeveloperRecently posted Auto Apply
Rothys · San Francisco · Hybrid 🇺🇸
ElixirSQLGit+18Technology$107k - $130k/yr - TS

Tier 3 IT Service Desk LeadRecently posted Auto Apply
T-Rex Solutions · Washington · Hybrid 🇺🇸
OnboardingMicrosoft OfficeMFA+10Technology$90k - $120k/yr - QU

Senior Salesforce Administrator (GTM)Recently posted Auto Apply
Qumulo · Seattle (hybrid) · Hybrid 🇺🇸
SQLSplunkNetSuite+3Technology$140k - $180k/yr - AD

Incident Response AnalystRecently posted Auto Apply
Agile Defense · Remote · Remote 🇺🇸
GitSplunkCompliance+3Technology$100k - $125k/yr - AD

Baseline Security EngineerRecently posted Auto Apply
Agile Defense · Remote · Remote 🇺🇸
AWSAPI GatewayELK+17Technology$135k - $150k/yr - ZO

Information Technology & Applications Intern [Summer 2027]Recently posted Auto Apply
Zoox · Foster City · Hybrid 🇺🇸
WorkdaySQLRobotics+8Technology$5.5k - $7.5k/mo - ZO

Hardware Engineer Intern, Vehicle Systems [Summer 2027]Recently posted Auto Apply
Zoox · Foster City · Hybrid 🇺🇸
SourcingRoboticsAutonomous Driving+5Technology$6.5k - $8.5k/mo - ZO

Hardware Engineer Intern, Vehicle Development [Summer 2027]Recently posted Auto Apply
Zoox · Foster City · Hybrid 🇺🇸
MATLABRoboticsAssembly+7Technology$6.5k - $8.5k/mo