1mo
Save
Mark Applied
Hide
SIEM Engineer
Huntsville or United States
$100k/yr RemoteFull Time
5+ YOEBachelor's in CS/IT/Cybersecurity (or equivalent), 5+ years enterprise IT experience, 3+ years SIEM experience, proficiency with SIEM/log formats, Azure/O365, SPL/SQL, Python/JavaScript, CI/CD, NIST/FISMA compliance, and strong communication skills.
Azure, O365, SPL (Splunk), SQL, JavaScript, Python, CI/CD, ITSM, CEF, LEEF, JSON, XML, FISMA, NIST 800-53, NIST 800-92, OMB M-21-31, CDM, MITRE ATT&CK
1mo
Save
Mark Applied
Hide
Senior SIEM Engineer
Washington or Washington
$130k-$145k/yr OnsiteFull Time
6+ YOEActive Top Secret clearance with SCI eligibility, 6+ years SIEM/cybersecurity engineering experience, expertise with Splunk/Elastic/QRadar, log ingestion, detection development, incident response, and strong documentation and communication skills.
Splunk, Elastic, QRadar, SIEM
1mo
Save
Mark Applied
Hide
SIEM Administrator Support
Camp H M Smith, Hawaii, United States
$127k-$132k/yr OnsiteFull Time
4+ YOE4+ years system/network/developer experience, 2+ years Splunk administration, Splunk Enterprise Certified Admin, Linux administration, SIEM content development, analytical/problem-solving skills, and an active Secret clearance.
Splunk Enterprise, Splunk Enterprise Security, ServiceNow, VMware, Linux, ACAS, PKI
2d
Save
Mark Applied
Hide
Elastic SIEM Engineer
Hanover, Maryland, United States
$150k-$165k/yr HybridFull Time
5+ YOE5+ years Elastic engineering experience, active Secret clearance, Bachelor's in information security or equivalent, DoD 8140/8570-compliant cert (e.g., Security+, CISSP), AWS experience preferred, Python/Bash scripting, Elastic Stack and SIEM expertise.
Elasticsearch, Logstash, Kibana, Elastic Security, AWS, Azure, GCP, Python, Bash
3d
Save
Mark Applied
Hide
IT Security SIEM Engineer
New York, New York, United States
$75-$85/hr HybridFull Time
7+ YOE7+ years Splunk/SIEM engineering experience, log onboarding, detection development, scripting (PowerShell/Python/Bash), EDR and incident response knowledge.
Splunk Enterprise, Splunk Cloud, PowerShell, Python, Bash, EDR, IDS, IPS
2mo
Save
Mark Applied
Hide
SIEM/SOAR Engineer
Knoxville, Tennessee, United States
$64k-$139k/yr HybridFull Time
3+ YOE3+ years SIEM/SOAR experience (Splunk/Sentinel), KQL/SPL/Python, API integration, enrichment/UEBA/automation, ability to obtain Public Trust clearance, US citizen or green card holder required.
Splunk, Sentinel, KQL, SPL, Python
2w
Save
Mark Applied
Hide
CrowdStrike Next-Gen SIEM Resident Consultant
California or United States
$85k-$120k/yr RemoteFull Time
5+ YOE5+ years in security operations/SIEM administration, familiarity with major SIEMs, query languages, detection engineering, scripting, cloud security, EDR and use of AI; strong communication and customer-facing consulting skills.
Next-Gen SIEM, LogScale, Splunk, QRadar, Sentinel, Chronicle, SQL, SPL, KQL, CQL, Python, PowerShell, Bash, AWS, Azure, GCP, OCI, EDR, SOAR, CrowdStrike Falcon
3w
Save
Mark Applied
Hide
SIEM Analyst II (R-00173)
Virginia, United States
OnsiteFull Time
True Zero Technologies: A veteran-owned small business delivering cybersecurity and technology services focused on people-first outcomes.
10+ YOE10+ years security experience, 5+ years SIEM experience (Splunk preferred), US citizenship, CYSA+ and/or GIAC preferred, Bachelors degree preferred, ability to obtain/maintain clearance.
Splunk
1mo
Save
Mark Applied
Hide
SIEM Subject Matter Expert
Honolulu, Hawaii, United States
OnsiteFull Time
Implement, manage, and optimize SIEM infrastructure; ensure DISA STIG/SRG compliance; develop data integrations and pipelines; Linux/Windows administration; DoD 8140 qualification or listed certifications; U.S. citizen with Secret clearance and TS eligibility.
SIEM, Confluent, Elastic, RHEL, CentOS, Linux, Windows, DISA STIG, DISA SRG, CORA Inspections
3w
Save
Mark Applied
Hide
SeniorAdministrator - Security Analysis, SIEM (129502)
United States
OnsiteFull Time
12+ YOE5+ Mgmt12+ years in security operations with 5+ years leading SOC teams; hands‑on SIEM administration and detection engineering (Splunk, Sentinel, QRadar, LogRhythm); incident response, EDR/XDR, SOAR, vulnerability management, and cloud/identity telemetry experience.
Splunk, Microsoft Sentinel, LogRhythm, QRadar, Microsoft Defender for Endpoint, CrowdStrike, SentinelOne, Splunk SOAR, Cortex XSOAR, Microsoft Logic Apps, Qualys, Tenable, Rapid7, Palo Alto, Fortinet, Cisco, F5, Zscaler, MITRE ATT&CK, NIST 800-61, NIST CSF, ISO 27001
2mo
Save
Mark Applied
Hide
Detection Engineer / SIEM Analyst
United States
RemoteFull Time
10+ YOE10+ years software development; 7+ years in software development and technical operations; US citizen; degree; SIEM, SecDevOps, cloud, AWS; CNCF/Kubernetes.
Ansible, Terraform, Docker, AWS, ECS, EKS, ECR, Fargate, Jenkins, Git, GitLab
1mo
Save
Mark Applied
Hide
SIEM / Threat Monitoring Analysts
Washington, District of Columbia, United States
OnsiteFull Time
3+ YOE3+ years SIEM administration and threat monitoring experience (Splunk preferred), OSINT monitoring, digital forensics, incident correlation, incident response knowledge; Secret clearance minimum, TS preferred.
Splunk
1mo
Save
Mark Applied
Hide
Senior Manager - SIEM SOAR Engineer
United States
$150k-$200k/yr RemoteFull Time
7+ YOE2+ Mgmt7–10+ years in cybersecurity delivery/consulting; lead teams deploying CrowdStrike Falcon/LogScale; strong SIEM/SOAR, automation, and client-facing skills.
CrowdStrike Falcon, CrowdStrike LogScale, Terraform, Ansible, PowerShell
3w
Save
Mark Applied
Hide
Senior Consultant, SIEM Engineer (Logstash)
Ashburn, Virginia, United States
$90k-$140k/yr OnsiteFull Time
3+ YOE3+ years in security/data/devsecops roles; Logstash expertise, Regex, Splunk, Amazon SQS/SNS, GitHub, Jenkins, and SQL; strong analytical and troubleshooting skills; experience with CI/CD and cloud-native event-driven systems.
Logstash, Regex, Amazon SQS, Amazon SNS, GitHub, Jenkins, Splunk, SQL, Elasticsearch, Kibana, Docker, Kubernetes
2w
Save
Mark Applied
Hide
SIEM Data Engineer (DoD TS Clearance)
Washington, District of Columbia, United States
OnsiteFull Time
6+ YOEMust be US citizen with active Top Secret clearance; 6+ years related experience with Splunk data onboarding, parsing, normalization, SPL, regex, and log management; strong communication and problem-solving.
Splunk, SPL, props.conf, transforms.conf, Splunk Common Information Model (CIM), HTTP Event Collector (HEC), Python, Bash
3mo
Save
Mark Applied
Hide
Cyber Defense Engineer - SIEM
New York, New York, United States
OnsiteFull Time
Experience in cyber defense engineering, SIEM, security monitoring, incident response, and cloud/network security.
SIEM, Security monitoring, Incident response tools
1w
Save
Mark Applied
Hide
Splunk SIEM Data Onboarding Engineer
Reston, Virginia, United States
$99k-$225k/yr OnsiteFull Time
2+ YOE2+ years managing and configuring Splunk and Cribl, experience with Splunk architecture, data pipelines, scripting, Linux/Windows administration, and security requirements; active TS/SCI clearance required.
Splunk, Cribl, Splunk REST API, Cribl Redmap, Linux, Windows, tcpdump, Wireshark, vi, vim, Python, Bash, PowerShell, Git, Ansible, SPL
1w
Save
Mark Applied
Hide
Splunk SIEM Data Onboarding Engineer
Reston or Washington or Norfolk
$99k-$225k/yr OnsiteFull Time
2+ YOE2+ years managing and configuring Splunk and Cribl, experience with Splunk architecture, data pipelines, props/transforms/inputs/outputs, Linux/Windows administration, Splunk REST API, and TS/SCI clearance.
Splunk, Cribl, Linux, Windows, Splunk REST API, tcpdump, Wireshark, vi, vim, JavaScript, Python, Bash, PowerShell, Git, Ansible
3d
Save
Mark Applied
Hide
IT Security SIEM Engineer (Splunk Experience is Required) - Hybrid Role in New York City
New York, New York, United States
HybridContract
Hands-on Splunk Enterprise/Cloud administration, SIEM detection development, log onboarding, scripting (PowerShell/Python/Bash), EDR and incident response experience required.
Splunk Enterprise, Splunk Cloud, PowerShell, Python, Bash, IDS/IPS, EDR
2mo
Save
Mark Applied
Hide
Principal Consultant - SIEM | Remote, USA
Denver or Bozeman or Leawood or Dallas or Arlington or Austin or Jacksonville
$135k-$185k/yr RemoteFull Time
10+ YOE10–15 years in information security/technology consulting; 8–10 years in security architecture for SIEM/SOC; strong SIEM platform expertise; willing to travel; CISSP/CISM/CISA or SIEM certifications preferred.
Google SecOps, Microsoft Sentinel, CrowdStrike NG-SIEM, Palo Alto XSIAM, KQL, Python, PowerShell, YAML
Explore Jobs