1mo
Save
Mark Applied
Hide
Senior SIEM Engineer
Washington or Washington
$130k-$145k/yr OnsiteFull Time
6+ YOEActive Top Secret clearance with SCI eligibility, 6+ years SIEM/cybersecurity engineering experience, expertise with Splunk/Elastic/QRadar, log ingestion, detection development, incident response, and strong documentation and communication skills.
Splunk, Elastic, QRadar, SIEM
1mo
Save
Mark Applied
Hide
SIEM Engineer
Huntsville or United States
$100k/yr RemoteFull Time
5+ YOEBachelor's in CS/IT/Cybersecurity (or equivalent), 5+ years enterprise IT experience, 3+ years SIEM experience, proficiency with SIEM/log formats, Azure/O365, SPL/SQL, Python/JavaScript, CI/CD, NIST/FISMA compliance, and strong communication skills.
Azure, O365, SPL (Splunk), SQL, JavaScript, Python, CI/CD, ITSM, CEF, LEEF, JSON, XML, FISMA, NIST 800-53, NIST 800-92, OMB M-21-31, CDM, MITRE ATT&CK
1mo
Save
Mark Applied
Hide
SIEM Engineer-Atlanta, GA
Atlanta, Georgia, United States
RemoteContract, Full Time
4+ YOEBachelor's in IT or related field; 4+ years SIEM/cyber security engineering; U.S. citizen with Public Trust; Atlanta, GA or remote with client approval.
Splunk, AWS, Azure, Ansible, Terraform, Python
2mo
Save
Mark Applied
Hide
Detection Engineer / SIEM Analyst
United States
RemoteFull Time
10+ YOE10+ years software development; 7+ years in software development and technical operations; US citizen; degree; SIEM, SecDevOps, cloud, AWS; CNCF/Kubernetes.
Ansible, Terraform, Docker, AWS, ECS, EKS, ECR, Fargate, Jenkins, Git, GitLab
1w
Save
Mark Applied
Hide
SIEM Platform Engineer (DoD TS Clearance)
Washington, District of Columbia, United States
OnsiteFull Time
6+ YOEDesign, deploy, and maintain enterprise Splunk environments; perform capacity planning, performance tuning, platform security, and documentation; US citizen with active Top Secret clearance and 6+ years' related experience with a relevant bachelor's degree.
Splunk, SPL
2w
Save
Mark Applied
Hide
Senior Consultant, SIEM Engineer (Logstash)
Ashburn, Virginia, United States
$90k-$140k/yr OnsiteFull Time
3+ YOE3+ years in security/data/devsecops roles; Logstash expertise, Regex, Splunk, Amazon SQS/SNS, GitHub, Jenkins, and SQL; strong analytical and troubleshooting skills; experience with CI/CD and cloud-native event-driven systems.
Logstash, Regex, Amazon SQS, Amazon SNS, GitHub, Jenkins, Splunk, SQL, Elasticsearch, Kibana, Docker, Kubernetes
1mo
Save
Mark Applied
Hide
US E - GPS Cyber CD&R Core- SIEM Engineer, L45- Profile (LL)
United States
$103k-$189k/yr HybridFull Time
3+ YOEBachelor's degree in a technical field; Active Secret Clearance; 3+ years in cybersecurity/SIEM; 3+ years with Splunk, Palo Alto XSIAM, or CrowdStrike NG SIEM; 2+ years in log analysis and SIEM tuning; up to 20% travel; willing to work onsite or at client sites in the US.
Splunk, Palo Alto XSIAM, CrowdStrike NG SIEM, Security Information and Event Management
1mo
Save
Mark Applied
Hide
Senior Manager - SIEM SOAR Engineer
United States
$150k-$200k/yr RemoteFull Time
7+ YOE2+ Mgmt7–10+ years in cybersecurity delivery/consulting; lead teams deploying CrowdStrike Falcon/LogScale; strong SIEM/SOAR, automation, and client-facing skills.
CrowdStrike Falcon, CrowdStrike LogScale, Terraform, Ansible, PowerShell
3mo
Save
Mark Applied
Hide
Cyber Defense Engineer - SIEM
New York, New York, United States
OnsiteFull Time
Experience in cyber defense engineering, SIEM, security monitoring, incident response, and cloud/network security.
SIEM, Security monitoring, Incident response tools
1w
Save
Mark Applied
Hide
CrowdStrike Next-Gen SIEM Resident Consultant
California or United States
$85k-$120k/yr RemoteFull Time
5+ YOE5+ years in security operations/SIEM administration, familiarity with major SIEMs, query languages, detection engineering, scripting, cloud security, EDR and use of AI; strong communication and customer-facing consulting skills.
Next-Gen SIEM, LogScale, Splunk, QRadar, Sentinel, Chronicle, SQL, SPL, KQL, CQL, Python, PowerShell, Bash, AWS, Azure, GCP, OCI, EDR, SOAR, CrowdStrike Falcon
1mo
Save
Mark Applied
Hide
Cyber Engineer - Elastic Security SIEM
Chesapeake or Norfolk or Virginia or United States
$107k-$183k/yr OnsiteFull Time
5+ YOE5+ years cybersecurity engineering (3+ years Elastic Stack/SIEM), Bachelor's in CS/IT/Cybersecurity or equivalent, Elastic and security certifications preferred, Secret clearance required, strong Linux, Python, Ansible, Docker/Kubernetes experience.
Elastic Stack, Elasticsearch, Logstash, Kibana, Beats, Elastic Agent, Fleet, Elastic Common Schema (ECS), ES|QL, EQL, KQL, Red Hat Enterprise Linux, SAN, Ansible, Docker, Kubernetes, Python, Bash, PowerShell, VMware vSphere, ESXi, OpenStack, VMware Cloud Foundation, MITRE ATT&CK
2w
Save
Mark Applied
Hide
SeniorAdministrator - Security Analysis, SIEM (129502)
United States
OnsiteFull Time
12+ YOE5+ Mgmt12+ years in security operations with 5+ years leading SOC teams; hands‑on SIEM administration and detection engineering (Splunk, Sentinel, QRadar, LogRhythm); incident response, EDR/XDR, SOAR, vulnerability management, and cloud/identity telemetry experience.
Splunk, Microsoft Sentinel, LogRhythm, QRadar, Microsoft Defender for Endpoint, CrowdStrike, SentinelOne, Splunk SOAR, Cortex XSOAR, Microsoft Logic Apps, Qualys, Tenable, Rapid7, Palo Alto, Fortinet, Cisco, F5, Zscaler, MITRE ATT&CK, NIST 800-61, NIST CSF, ISO 27001
3d
Save
Mark Applied
Hide
Splunk SIEM Data Onboarding Engineer
Reston, Virginia, United States
$99k-$225k/yr OnsiteFull Time
2+ YOE2+ years managing and configuring Splunk and Cribl, experience with Splunk architecture, data pipelines, scripting, Linux/Windows administration, and security requirements; active TS/SCI clearance required.
Splunk, Cribl, Splunk REST API, Cribl Redmap, Linux, Windows, tcpdump, Wireshark, vi, vim, Python, Bash, PowerShell, Git, Ansible, SPL
4d
Save
Mark Applied
Hide
Splunk SIEM Data Onboarding Engineer
Reston or Washington or Norfolk
$99k-$225k/yr OnsiteFull Time
2+ YOE2+ years managing and configuring Splunk and Cribl, experience with Splunk architecture, data pipelines, props/transforms/inputs/outputs, Linux/Windows administration, Splunk REST API, and TS/SCI clearance.
Splunk, Cribl, Linux, Windows, Splunk REST API, tcpdump, Wireshark, vi, vim, JavaScript, Python, Bash, PowerShell, Git, Ansible
1mo
Save
Mark Applied
Hide
Security Solution Engineer — SIEM/SOAR
Kansas City or Sarasota or Scottsdale or Overland Park
HybridFull Time
3+ YOE3+ years in detection engineering or security operations; SIEM/SOAR expertise; Python, log parsers, dashboards; knowledge of MITRE ATT&CK.
YARA-L, KQL, SOAR, Python, REST API, Google SecOps, Microsoft Sentinel, APIs, Log parsers
2w
Save
Mark Applied
Hide
Content Developer (SIEM Cyber Security)
San Antonio or Lackland Air Force Base
OnsiteFull Time
5+ YOEActive TS/SCI clearance, DoD 8570 IAT Level III CND, GMLE or degree in computer science, 5+ years SIEM experience (ArcSight/Splunk/ELK), 3+ years network traffic analysis, SOAR and scripting (Python, PowerShell) experience preferred.
SIEM, ArcSight, Splunk, ELK, Phantom, Demisto, SOAR, Python, PowerShell, IDS/IPS, MITRE ATT&CK
2w
Save
Mark Applied
Hide
Content Developer (SIEM Cyber Security)
San Antonio or Lackland Air Force Base
OnsiteFull Time
5+ YOEActive TS/SCI clearance, DoDD 8570 AT Level III CND, GMLE or degree in Computer Science, 5+ years SIEM experience (ArcSight/Splunk/ELK), 3+ years network traffic analysis, SOAR, Python and PowerShell proficiency, MITRE ATT&CK knowledge.
SIEM, ArcSight, Splunk, ELK, Phantom, Demisto, Python, PowerShell, MITRE ATT&CK, IDS/IPS, SOAR
3mo
Save
Mark Applied
Hide
Security Integration Engineer (SIEM/XDR) (MD, Baltimore)
Baltimore, Maryland, United States
OnsiteFull Time
Experience with SIEM/XDR, threat intel integration, automation workflows, and dashboards.
4w
Save
Mark Applied
Hide
Principal Software Engineer, SIEM (Ruby/Rails)
United States
$215k-$240k/yr RemoteFull Time
15+ YOE15+ years building complex software, 8+ years Ruby on Rails, 8+ years scaling Postgres, BS in CS/Engineering or equivalent, JS/CSS, ActiveRecord, Agile experience, strong communication and mentoring skills.
Ruby on Rails, Postgres, JavaScript, CSS, ActiveRecord, Stimulus, Turbo, Hotwire, Tailwind CSS, Tailwind UI, Flowbite, Clickhouse, Vector, AWS, Azure, GCP, SIEM
2d
Save
Mark Applied
Hide
Security Architect - Consultant - SIEM Engineer
United States
RemoteFull Time
5+ YOEHands-on Palo Alto Cortex XSIAM/Cortex XDR and Cribl experience, SIEM/XDR engineering for multi-tenant SOC, detection engineering, Python/Bash automation, 5+ years supporting large IT environments, bachelor's in IT/infosec or 8 years' experience.
Palo Alto Cortex XSIAM, Cortex XDR, Cribl, Python, Bash
Explore Jobs