SIEM Engineer - Washington, United States - MartinFed

MartinFed Washington, United States

1 week ago

Description

Job Description

COMPANY OVERVIEW

Founded in 2007 in Huntsville, AL, MartinFed provides the U.S. government with customer-focused, performance-based solutions using technology and an empowered workforce as an engine to drive its customers' missions. Our goal is to attract the best and brightest within their field.

We invest in our people because they are our greatest asset. They cultivate our purpose, embody and reflect our core values, and define our culture. MartinFed's core values that set us apart are the following:

Be Driven - We are fueled by the hunger to learn more and do more.
Be Curious - We engage in continuous improvement - never accepting the status quo.
Be Humble - We seek honest feedback to strengthen our relationships.
Pursue Excellence - We strive to achieve extraordinary results and do not settle for mediocrity.

Strive for excellence and consider joining our growing team today

Please Note: This position is contingent upon award

JOB OVERVIEW

Job Summary: The SIEM Engineer is responsible for designing, implementing, and managing SIEM solutions to collect, analyze, and visualize data from various sources within government agencies. This role involves configuring SIEM environments, creating dashboards, and ensuring the effective use of SIEM's capabilities to monitor, detect, and respond to security threats and operational insights. The SIEM Engineer collaborates closely with IT teams, security analysts, and stakeholders to optimize data intelligence and drive informed decision-making.

Essential Functions:

SIEM Deployment and Configuration:
1. Design and deploy SIEM environments, including configuring indexers, search heads, and forwarders, to support data collection and analysis needs.
2. Optimize SIEM configurations to ensure efficient data storage, retrieval, and search capabilities.
Data Collection and Integration:
1. Develop data ingestion strategies, create data inputs, and set up data source integration for various log and event data types.
2. Design and implement data normalization and transformation processes for consistent and accurate analysis.
Dashboard and Visualization Development:
1. Design and create interactive dashboards, reports, and visualizations using SIEM's capabilities.
2. Present data insights in a clear and actionable manner to support decision-making processes.
Search Queries and Alerts:
1. Develop and optimize search queries and alert mechanisms to proactively monitor for security threats, anomalies, and operational issues.
2. Configure alerts to trigger automated responses or notifications based on predefined criteria.
SIEM App Development:
1. Build custom SIEM apps and add-ons to extend functionality and support specific agency requirements.
2. Collaborate with development teams to integrate SIEM with other systems and tools.
Security and Compliance:
1. Implement security controls and best practices to protect data stored in SIEM and ensure compliance with relevant regulations and standards.
2. Monitor and analyze security-related events to detect and respond to potential threats.
Performance Optimization:
1. Monitor system performance and troubleshoot issues related to data indexing, search performance, and resource utilization.
2. Implement optimizations to enhance SIEM's efficiency and responsiveness.
Training and Documentation:
1. Provide training and guidance to other team members on SIEM best practices, usage, and administration.
2. Create documentation for configurations, processes, and troubleshooting procedures.

Qualifications:

Bachelor's degree in Computer Science, or a related field.
Proven experience in designing, deploying, and managing SIEM environments, preferably within government or enterprise environments.
Strong understanding of data analytics, log management, and data visualization principles.
Proficiency in Splunk query language (SPL) and the ability to develop complex search queries and reports.
Knowledge of cybersecurity concepts, threat detection, and incident response strategies.
Familiarity with security standards and regulations (NIST, FISMA, etc.) applicable to data analysis and storage.
Excellent problem-solving skills and the ability to diagnose and resolve technical issues.
Strong communication skills, both written and verbal, to convey technical concepts effectively.
Ability to obtain and maintain a Top Secret security clearance.

PHYSICAL REQUIREMENTS & ENVIRONMENTAL CONDITIONS

Inside office environment.
Working on a computer for long periods of time.
May involve long period of sitting at a desk.
The work environment is fast-paced and sometimes involves extreme deadline pressures.

OTHER DUTIES

This job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.

MartinFed is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regards to race, color, religion, religious creed, gender, sexual orientation, gender identity, gender expression, transgender, pregnancy, marital status, national origin, ancestry, citizenship status, age, disability, protected Veteran Status, genetics or any other characteristics protected by applicable federal, state or local law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. In addition to federal law requirements, MartinFed complies with all applicable state and local laws governing nondiscrimination in all locations.

If you are a qualified individual with a disability or disabled veteran, you have the right to request a reasonable accommodation if you are unable or limited in your ability to use or access MartinFed's current openings as a result of your disability. You can request reasonable accommodations by calling Thank you for your interest in MartinFed.

Please Note: All positions at MartinFed are contingent upon passing both a background check and drug screening prior to a start date and are subject to random drug screenings during the employment period. In addition, MartinFed is an E-Verify employer.

Job Posted by ApplicantPro

SIEM/Splunk Engineer

1 week ago

Coalfire Washington, DC, United States

About Coalfire · Coalfire Federal is a market leading cybersecurity consultancy firm that provides independent and tailored advice, assessments, technical testing and a full suite of cyber engineering services to Federal agency customers. Coalfire Federal along with its parent co ...
SIEM Engineer

3 weeks ago

Wood Consulting Annapolis, United States

Overview: · SIEM (Security Information & Event Management) Engineer / Splunk Certified Admin · (url removed) · The selected candidate will be responsible for configuring the collection, parsing, correlation, and visualization of events for a critical operational system. She/he wi ...
SIEM Engineer III

2 weeks ago

ECS Fairfax, United States

ECS is seeking a SIEM Engineer III to work in our Fairfax, VA office. · Job Description: · Are you passionate about the ever-evolving field of cybersecurity and ready to embark on a career with a positive and lasting impact? Join our dynamic team at ECS, a leading provider of sol ...
NS2 SIEM Engineering Manager

3 weeks ago

SAP Herndon, United States

We help the world run better · At SAP, we enable you to bring out your best. Our company culture is focused on collaboration and a shared passion to help the world run better. How? We focus every day on building the foundation for tomorrow and creating a workplace that embraces ...
Microsoft Azure Sentinel SIEM Engineer

2 weeks ago

Shuvel Digital Vienna, United States

Senior Secure Innovation and Resilience (SI&R) Resource - Microsoft Azure Professional who is experienced with Kusto Query Language (KQL) and design of security-specific alerts. The senior resource will work within the current information security team and perform as a lead techn ...
SIEM Engineer/Splunk Certified Admin

2 weeks ago

SUNAYU Annapolis, United States

Location: Annapolis Jct, MD · Category: SIEM (Security Information and Event Management) Engineer / Splunk Certified Admin · Travel Required: No · Remote Type: No · Clearance: Top Secret/SCI w/ FS Polygraph (last poly must be within the past 7 years) · Job Summary / Primary Resp ...
SIEM Engineer/Splunk Certified Admin

1 week ago

CyberCore Technologies Annapolis, United States

**TS/SCI Clearance w/Polygraph Required**Job Summary / Primary ResponsibilitiesThe selected candidate will be responsible for configuring the collection, parsing, correlation, and visualization of events for a critical operational system. She/he will demonstrate strong skills in ...
SIEM Engineer/Splunk Certified Admin

5 days ago

SUNAYU Annapolis, United States

Location: Annapolis Jct, MDCategory: SIEM (Security Information and Event Management) Engineer / Splunk Certified AdminTravel Required: NoRemote Type: NoClearance: Top Secret/SCI w/ FS Polygraph (last poly must be within the past 7 years) · Job Summary / Primary Responsibilities ...
SIEM Engineer/Splunk Certified Admin

2 weeks ago

SUNAYU Annapolis, United States

Location: Annapolis Jct, MD · Category: SIEM (Security Information and Event Management) Engineer / Splunk Certified Admin · Travel Required: No · Remote Type: No · Clearance: Top Secret/SCI w/ FS Polygraph (last poly must be within the past 7 years) · Job Summary / Primary ...
Cyber Security Consultant

2 weeks ago

Stonewater LLC Washington, United States

**Cybersecurity Consultant** · **Cybersecurity Program Manager** · The Program Manager will provide overall guidance to the project and will be the primary interface between the government and the contractors. The individual performing tasks as specified in SOW section 3.1 must m ...
Tier 1 Onsite Security Operations Center

3 weeks ago

Arcetyp LLC Washington, United States

Arcetyp LLC is a growing small business that provides a broad range of consulting services to US Federal Government, US Military, and Commercial clients. Services include Management & IT Consulting, Program & Project Management, and Professional & Admin Services. We are recruitin ...
SOC Analyst

3 weeks ago

InquisIT LLC Washington, United States

**Transforming the Business of Government** · InquisIT is a high-energy, forward-thinking, advanced technology company that provides the Federal Government and select private-sector organizations with an impressive array of services and solutions. Company expertise includes Syste ...
Information Assurance and Security Specialist

1 week ago

Aspire Technologies Washington, United States

We are looking for **A214: IA&SS Journeyman (Information Assurance and Security Specialist Master) (Webcam interviews)** · **DIRECT CLIENT Position** · **Length: 9-21 Months + **(annual extensions) · **Location: 1101 4th St. SW, 6th Floor, Washington DC 20024** · **Immediate inte ...
Ia&ss Journeyman

3 weeks ago

Centura Washington, United States

Hi, · We are looking for · **Position**: IA&SS Journeyman · **Location**: 1101 4th St. SW, 6th Floor, Washington DC 20024 · **Duration**: 9-21Months+ (annual extensions) · **Immediate interviews** - Webcam interviews ONLY · Please Note this position in HYBRID(Onsite once a week) ...
Information Assurance

1 week ago

NextGen Solutions Corp Washington, United States

We are looking for **A214: IA&SS Master (Information Assurance and Security Specialist Master)(Min 6yrs Exp) (Webcam interviews)** · **DIRECT CLIENT Position** · **Number of positions: 1** · **Length: 9-21 Months + **(annual extensions) · **Location: Washington DC 20024** · **Imm ...
Computer Security Systems Specialist Level Iii

2 weeks ago

Computer World Services Washington, United States

**Key Tasks and Responsibilities** · - Design and customize complex search queries, and promote advanced searching, forensics and analytics, Develop dashboards, data models, reports and optimize their performance. · - Develop, implement, and document configuration standards, poli ...
Security Operations Center

1 week ago

Computer World Services Washington, United States

Key Tasks and Responsibilities · - Provide 24x7 SOC support, participating in daily DHS SOC status calls and monthly DHS SOC working group meetings. · - Utilize CUSTOMER enterprise security information and event management (SIEM) and other monitoring tools for security monitoring ...
Enterprise Account Executive

3 weeks ago

Axonius Washington, United States

Culture is important to us at Axonius and our sales department. To identify the correct fit for our organization the below key characteristics are required: · **Key Characteristics** · - High energy and high intrinsic motivation. · - Competition with the want to win. · - Collabor ...
Security Operations Center

2 weeks ago

Computer World Services Washington, United States

Key Tasks and Responsibilities · - Provide 24x7 SOC support, participating in daily DHS SOC status calls and monthly DHS SOC working group meetings. · - Utilize CUSTOMER enterprise security information and event management (SIEM) and other monitoring tools for security monitoring ...
Tier Iii Analyst

1 week ago

Peraton Washington, United States

**About Peraton** · **Responsibilities** · We are seeking a **Tier III Analyst** to join our Peraton team who will lead and actively participate in the investigation, analysis, and resolution of Tier 3 and escalated cybersecurity incidents. · **What you'll do**: · The **Tier III ...