282 siem engineer jobs at 152 companies in Springfield, VA
1mo
Save
Mark Applied
Hide
1mo
Senior SIEM Engineer
Washington or Washington
$130k-$145k/yrOnsiteFull Time
ECSNYSE: ASGN: Provides advanced technology and engineering services to government agencies.
6+ YOEActive Top Secret clearance with SCI eligibility, 6+ years SIEM/cybersecurity engineering experience, expertise with Splunk/Elastic/QRadar, log ingestion, detection development, incident response, and strong documentation and communication skills.
ASRC Federal: Provides engineering and IT services to federal government agencies.
5+ YOE5+ years Elastic engineering experience, active Secret clearance, Bachelor's in information security or equivalent, DoD 8140/8570-compliant cert (e.g., Security+, CISSP), AWS experience preferred, Python/Bash scripting, Elastic Stack and SIEM expertise.
Infinitive: Consultancy for modernizing and monetizing enterprise data through AI.
3+ YOE3+ years in security/data/devsecops roles; Logstash expertise, Regex, Splunk, Amazon SQS/SNS, GitHub, Jenkins, and SQL; strong analytical and troubleshooting skills; experience with CI/CD and cloud-native event-driven systems.
Booz Allen HamiltonNYSE: BAH: Provides technology and management consulting services to diverse organizations.
2+ YOE2+ years managing and configuring Splunk and Cribl, experience with Splunk architecture, data pipelines, props/transforms/inputs/outputs, Linux/Windows administration, Splunk REST API, and TS/SCI clearance.
Booz Allen HamiltonNYSE: BAH: Consulting and technology services for government and commercial clients
2+ YOE2+ years managing and configuring Splunk and Cribl, experience with Splunk architecture, data pipelines, scripting, Linux/Windows administration, and security requirements; active TS/SCI clearance required.
Chenega Corporation: Provides professional government, defense, and facility support services.
5+ YOEBachelor's in IT/Computer Engineering/Cybersecurity, 5+ years systems/security engineering (3+ in classified/air-gapped), Security+ and DoD IAT II/III (or ability to obtain), DoD Top Secret/SCI clearance with CI polygraph eligibility; strong Linux, virtualization, automation, cloud, and SIEM experience.
CACINYSE: CACI: Provides information technology and professional services to government clients.
5+ YOEBachelor's degree, active TS/SCI, 5+ years cyber engineering (2+ with modern software), Kubernetes security, IaC/PaaS/DevSecOps experience, Ansible and scripting, SIEM/SAST/DAST/SCA familiarity, network protocol knowledge.
Scale AI: Provides data and infrastructure for training artificial intelligence models.
5+ YOETop Secret clearance required; 5+ years in detection engineering/incident response/security ops preferred; production-grade coding in Python/NodeJS/TypeScript; experience with detection pipelines, SIEM/EDR/SOAR, cloud security telemetry, and digital forensics.
WorkdayNASDAQ: WDAY: Provides cloud-based software for financial and human capital management.
10+ YOE2+ Mgmt10+ years in cybersecurity with 2+ years technical leadership, Bachelor's degree, expertise in incident response, SIEM/SOAR, digital forensics, threat hunting, security automation, cloud-native security, scripting, and AI applied to security.
VerisignNASDAQ: VRSN: Provides internet domain name registry and DNS infrastructure services.
8+ YOEBachelor's in CS or related (or equivalent), 8+ years security experience (5+ in network security), experience with SIEM/EDR/VM/Cloud Security/SOAR tools, Python scripting, Windows and Linux administration.
SIEM, EDR, VM, Cloud Security, Security Orchestration and Automation tools, Python, Windows, Linux
Ardent: Provides geospatial and digital transformation services to federal agencies.
5+ YOEBachelor's in cybersecurity/IT/CS; 5+ years in cybersecurity engineering, security operations, incident response, or related; IAM, NIST, SIEM/EDR, cloud security; ability to obtain government background investigation.
SIEM, EDR/XDR, Vulnerability Management, AWS, Azure, IAM
MKS2 Technologies: Delivers cybersecurity and IT solutions to government agencies.
8+ YOE5+ Mgmt8+ years cybersecurity engineering experience with 5+ years leading security engineering initiatives; experience with SIEM, cloud and endpoint security tools; strong detection engineering, alert tuning, and security architecture skills.
Splunk, Microsoft Sentinel, Elastic, QRadar, LogRhythm, AWS, Azure, Microsoft Defender, CrowdStrike, Carbon Black, Tenable, Rapid7, Nessus, SIEM, SOAR, NIST, FISMA, RMF, Zero Trust
ENS Solutions: Provides cybersecurity and identity management solutions to government agencies.
10+ YOE10+ years in logging/observability or SIEM engineering; 3+ years with Cribl Stream/Edge; experience architecting multi-TB/day pipelines; Splunk expertise; Linux, Python/Bash, Git, Ansible/Terraform; TS/SCI and DoD 8570 certifications.
Municipal Securities Rulemaking Board: Regulates the municipal securities market to ensure market integrity.
7+ YOE7+ years in information security; strong incident response, detection engineering, IAM, networking, cloud/app security; experience with SIEM and security tooling.
New York or San Francisco or Washington or United States
$150k-$185k/yrHybridFull Time
Rocket MoneyNYSE: RKT: Personal finance app for managing subscriptions, bills, and budgets.
6+ YOE6+ years in cloud engineering with production cloud security; Terraform; AWS/GCP; IAM; network design; vulnerability management; SIEM; on-call; collaboration.
Deloitte: Global provider of audit, consulting, tax, and advisory services.
3+ YOERequires 3–5 years experience, scripting with Python and PowerShell, experience with SIEM (Splunk or ArcSight), system administration (Windows/Linux), Splunk Admin certification, and development/maintenance of SOC/SIEM content and processes.
Python, PowerShell, Splunk, ArcSight, Windows, Linux, Active Directory, Routers/Switches management, Firewall Management, SANS/NAS, Web servers, IAM/AAA, IDS/HDS, System vulnerability scanning tools, application/database vulnerability scanning tools, mobile device analysis, Secure coding, Service Now, SIEM
CMT Services: Provides management and technology consulting to government entities.
Hands-on experience engineering enterprise security controls per NIST SP 800-53 and 800-207, IAM/RBAC/PAM/MFA, SIEM and EDR/XDR monitoring, vulnerability management, cloud security (AWS/Azure), and bachelor's degree in IT or cybersecurity.