Search Jobs | Dice.com

34 results (3 new)

Group by company

SIEM Engineer

SAIC

Washington, District of Columbia • Today

Full-time

USD 120,001.00 - 160,000.00 per year

SIEM Engineer

Synapse Business Systems

Hybrid in Washington, District of Columbia • Yesterday

Easy Apply

Contract, Third Party

Depends on Experience

SIEM/Splunk Engineer

Synapse Business Systems

Hybrid in Washington, District of Columbia • Yesterday

Easy Apply

Contract

Depends on Experience

Jr SIEM/UEBA Engineer

Koniag, Inc.

Washington, District of Columbia • Today

Full-time

USD 95,000.00 per year

SIEM(Security Information & Event Management) Engineer

Leidos

Annapolis, Maryland • Today

Full-time

USD 131,300.00 - 237,350.00 per year

Projas Technologies, LLC

Remote • Today

Easy Apply

Contract

$70 - $84

Presales Solutions Engineer - SecOps/SIEM

SHI International Corporation

Remote or New York, New York • Today

Full-time

USD 96,000.00 - 184,000.00 per year

CSfC Systems Engineer Subject Matter Expert (SME)

Global Enterprise Services, LLC

Fort Belvoir, Virginia • Today

Full-time

USD 160,000.00 - 175,000.00 per year

CSfC Systems Engineer Subject Matter Expert (SME)

Leidos

Fort Belvoir, Virginia • Today

Full-time

USD 131,300.00 - 237,350.00 per year

CSfC Systems Engineer (SME)

JCS Solutions LLC

Fort Belvoir, Virginia • Today

Full-time

USD 116,000.00 - 167,000.00 per year

SIEM Subject Matter Expert

Kforce Technology Staffing

Tysons, Virginia • Today

Contract

$60 - $90 hourly

Splunk Enterprise and Enterprise Security Administrator

Leidos

Suitland-Silver Hill, Maryland • Today

Full-time

USD 107,900.00 - 195,050.00 per year

Principal Software Engineer, AI SIEM

SentinelOne

Remote • Today

Full-time

USD 216,000.00 - 297,000.00 per year

Cortex XSIAM Engineer

SRI Tech Solutions

Remote • Today

Easy Apply

Third Party, Contract

Depends on Experience

Intelligence Support Engineer

MANTECH

Maryland • Today

Full-time

Information Systems Security Engineer (ISSE) SME

Leidos

McLean, Virginia • Today

Full-time

USD 154,050.00 - 278,475.00 per year

Unified Endpoint Management Engineer

Global Enterprise Services, LLC

Fort Meade, Maryland • Today

Full-time

USD 145,000.00 - 160,000.00 per year

Senior Microsoft Intune Engineer (Endpoint Management)

JCS Solutions LLC

Fort Meade, Maryland • Today

Full-time

USD 100,000.00 - 129,000.00 per year

Senior SOAR Engineer

Chenega MIOS

Oakton, Virginia • Today

Full-time

USD 160,000.00 - 180,000.00 per year

Senior NSX Engineer

Vekner Consulting

Springfield, Virginia • Today

Full-time

Senior NSX Engineer

Bridge Core (BCore)

Springfield, Virginia • Today

Full-time

USD 122,000.00 - 150,000.00 per year

Senior NSX Engineer

General Dynamics

Springfield, Virginia • Today

Full-time

USD 125,800.00 - 170,200.00 per year

Senior Security Engineer

FINRA - Financial Industry Regulatory Authority

Rockville, Maryland • Today

Full-time

USD 112,300.00 - 211,400.00 per year

Senior Information System Security Engineer (ISSE)

J VERS LLC

Alexandria, Virginia • Today

Full-time

USD 131,300.00 - 237,350.00 per year

ZScaler SME Network Engineer

Agile Defense

Ashburn, Virginia • Today

Full-time

USD 170,000.00 - 185,000.00 per year

Network Engineer SME

Trace3

Linthicum Heights, Maryland • Today

Full-time

USD 223,000.00 - 243,000.00 per year

Senior Detection Engineer

SAIC

Remote • Today

Full-time

USD 60,001.00 - 100,000.00 per year

Senior Detection Engineer

Axiom Space

Remote or Texas • Today

Full-time

Manager, MSIAM SOC Engineering

PaloAlto Networks

Remote or California • Today

Full-time

USD 175,400.00 - 283,800.00 per year

SOC Engineer

Quzara LLC

Remote • Today

Full-time

USD 120,000.00 - 150,000.00 per year

SAIC

Job Details

Skills

SAP GRC
Security Clearance
Event Management
Analytical Skill
Continuous Improvement
Use Cases
Infrastructure Architecture
Testing
Management
Database
Dashboard
Hardening
Change Control
Lifecycle Management
Data Quality
Reporting
Technical Writing
Data-flow Diagrams
Scalability
Operational Efficiency
Computer Science
Information Systems
Normalization
Performance Tuning
SPL
SQL
DSL
Onboarding
Microsoft Windows
Network
Linux
Microsoft Windows Administration
Computer Networking
TCP/IP
Dragon NaturallySpeaking
DNS
HTTP
HTTPS
TLS
Scripting
Python
Windows PowerShell
Bash
Firewall
IDS
IPS
Vulnerability Management
ROOT
Accountability
Communication
Collaboration
Leadership
Kibana
Cloud Computing
Clustering
High Availability
Disaster Recovery
Storage
Optimization
Capacity Management
SIEM
Migration
Elasticsearch
SEO
Analytics
Configuration Management
Git
Continuous Integration
Continuous Delivery
Cyber Security
FISMA
OMB
FedRAMP
Splunk
Security+
CISSP
Information Technology
Systems Engineering
FOCUS

SAP GRC
Security Clearance
Event Management
Analytical Skill
Continuous Improvement
Use Cases
Infrastructure Architecture
Testing
Management
Database
Dashboard
Hardening
Change Control
Lifecycle Management
Data Quality
Reporting
Technical Writing
Data-flow Diagrams
Scalability
Operational Efficiency
Computer Science
Information Systems
Normalization
Performance Tuning
SPL
SQL
DSL
Onboarding
Microsoft Windows
Network
Linux
Microsoft Windows Administration
Computer Networking
TCP/IP
Dragon NaturallySpeaking
DNS
HTTP
HTTPS
TLS
Scripting
Python
Windows PowerShell
Bash
Firewall
IDS
IPS
Vulnerability Management
ROOT
Accountability
Communication
Collaboration
Leadership
Kibana
Cloud Computing
Clustering
High Availability
Disaster Recovery
Storage
Optimization
Capacity Management
SIEM
Migration
Elasticsearch
SEO
Analytics
Configuration Management
Git
Continuous Integration
Continuous Delivery
Cyber Security
FISMA
OMB
FedRAMP
Splunk
Security+
CISSP
Information Technology
Systems Engineering
FOCUS

Summary

Job ID: 2618060

Location: Washington, DC, US

Date Posted: 2026-10-16

Category: Cyber

Subcategory: Cyber GRC

Schedule: Full-Time

Shift: Day Job

Travel: No

Minimum Clearance Required: None

Clearance Level Must Be Able to Obtain: Public Trust

Potential for Remote Work: ORA_HYBRID

Description

SIEM Engineer

SAIC is seeking a SIEM Engineer to support enterprise cybersecurity operations and the modernization of the agency's security monitoring and analytics capabilities. This position is responsible for administering, engineering, and optimizing enterprise Security Information and Event Management (SIEM) platforms within a mission-critical federal environment.

The ideal candidate combines strong hands-on SIEM administration experience with engineering and architectural knowledge. The successful candidate should be capable of independently troubleshooting complex technical problems, improving platform performance and reliability, and contributing to the design of scalable SIEM solutions. Strong analytical skills, technical curiosity, initiative, and a commitment to continuous improvement are essential.

HYBRID: 3 days onsite / 2 days remote

Responsibilities

Administer, maintain, engineer, and optimize enterprise SIEM platforms, including Splunk Enterprise, Splunk ES, and Elastic / Elastic Security, ensuring availability, performance, reliability, and scalability.
Support SIEM architecture and modernization initiatives, including the transition from Splunk to Elastic, migration of data sources and security use cases, infrastructure design, testing, validation, and operational cutover.
Design, configure, manage, and troubleshoot enterprise log collection and ingestion pipelines, including syslog, Windows Event Collection/Forwarding, SIEM agents and forwarders, network devices, security technologies, applications, databases, and cloud services.
Onboard and normalize security telemetry, ensuring accurate collection, parsing, enrichment, indexing, retention, and searchability using applicable standards such as Splunk Common Information Model (CIM) and Elastic Common Schema (ECS).
Develop, maintain, migrate, and optimize SIEM searches, dashboards, reports, alerts, correlation rules, and security detections using SPL, SQL, and Elastic query technologies.
Monitor and optimize SIEM infrastructure health, ingestion performance, storage utilization, system capacity, and data availability while supporting high availability, disaster recovery, and scalability requirements.
Troubleshoot complex SIEM and logging issues across the complete data path, identify root causes, and implement sustainable solutions to improve reliability and operational effectiveness.
Support SIEM architecture, configuration management, security hardening, change control, automation, and platform lifecycle management in accordance with enterprise and federal requirements.
Collaborate with security analysts, infrastructure teams, application owners, and cybersecurity leadership to improve security visibility, detection capabilities, data quality, and operational reporting.
Develop and maintain technical documentation, including architecture diagrams, data flow diagrams, configuration standards, SOPs, and migration procedures, while providing technical guidance to other team members.
Evaluate emerging SIEM technologies and capabilities, identify opportunities for engineering improvements, and recommend solutions that improve performance, automation, scalability, and operational efficiency.
Take ownership of assigned technical initiatives, communicate progress and risks, and independently drive technical issues and projects through resolution.

Qualifications

Requirements

Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related technical discipline; OR equivalent relevant IT/cybersecurity experience.
9+ years of relevant IT or cybersecurity experience, including at least 3 years of hands-on SIEM administration, engineering, or enterprise logging experience.
Ability to obtain and maintain a Public Trust requiring U.S. Citizenship.
Demonstrated experience administering, engineering, or troubleshooting enterprise SIEM platforms, with hands-on experience in Splunk Enterprise and working knowledge of Elastic or comparable search and analytics technologies.
Strong understanding of SIEM architecture, distributed systems, enterprise logging, data ingestion, parsing, normalization, indexing, retention, and performance optimization.
Proficiency with Splunk Search Processing Language (SPL), working knowledge of SQL, and familiarity with Elastic query technologies such as KQL, ES|QL, EQL, or Query DSL.
Experience onboarding and troubleshooting enterprise data sources, including Windows/Linux systems, network devices, security appliances, applications, and cloud environments.
Strong Linux and Windows administration skills, including working knowledge of networking, TCP/IP, DNS, HTTP/HTTPS, TLS, syslog, and related protocols.
Experience with scripting or automation using Python, PowerShell, Bash, REST APIs, or comparable technologies.
Familiarity with enterprise cybersecurity technologies such as EDR, firewalls, IDS/IPS, identity systems, vulnerability management, and security monitoring platforms.
Demonstrated ability to independently investigate complex technical problems, analyze data, identify root causes, and develop practical engineering solutions.
Strong technical curiosity, initiative, accountability, and ability to learn new technologies while adapting to evolving enterprise requirements.
Excellent written and verbal communication skills, with the ability to document technical solutions and collaborate effectively with technical teams and leadership..

Preferred Qualifications

Hands-on experience with Elastic Stack / Elastic Security, including Elasticsearch, Kibana, Elastic Agent/Fleet, Beats, Logstash, and Elastic query technologies.
Experience with distributed or cloud-based SIEM architectures, including clustering, high availability, disaster recovery, storage optimization, and capacity planning.
Experience supporting enterprise SIEM migrations, particularly Splunk-to-Elastic, including data source migration, detection migration, and operational validation.
Advanced experience with Splunk Enterprise / Splunk ES, including distributed architectures, CIM, search optimization, and platform administration.
Experience with security detection engineering, correlation rules, alert tuning, MITRE ATT&CK, or security analytics development.
Familiarity with configuration management, Infrastructure-as-Code, Git, CI/CD, and automated platform deployments.
Experience supporting cybersecurity operations within federal environments and familiarity with NIST, FISMA, OMB, and FedRAMP requirements.
Relevant technical certifications such as Splunk Enterprise Certified Admin, Splunk Enterprise Certified Architect, Elastic Certified Engineer, Security+, CISSP, or comparable certifications.

Target salary range: $120,001 - $160,000. The estimate displayed represents the typical salary range for this position based on experience and other factors.

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.

Dice Id: 10111346
Position Id: 2618060
Posted 5 days ago

Company Info

About SAIC

SAIC® is a premier mission integrator focused on advancing the power of technology and innovation to serve and protect our world. Our robust portfolio of offerings across the defense, space, intelligence, and civilian markets includes secure high-end solutions in mission IT, enterprise IT, engineering services, and professional services. We integrate emerging technology, rapidly and securely, into mission critical operations that modernize and enable critical national imperatives.

We are approximately 23,000 strong; driven by mission, united by purpose, and inspired by opportunities. Headquartered in Reston, Virginia, SAIC has annual revenues of approximately $7.3 billion. For more information, visit saic.com. For ongoing news, please visit our newsroom.

Go to company profile

Fitment

Dice Job Match Score™

To see how well you match this job, please log in or create an account.

Once logged in, be sure to complete your profile to get the most accurate match score.

Create job alert

Never miss an opportunity! Create an alert based on the job you applied for.

Similar Jobs

Senior Detection Engineer

Remote

•

Today

Job ID: 2617981 Location: Remote Work, TN, US Date Posted: 2026-10-15 Category: Cyber Subcategory: Cybersecurity Ops Schedule: Full-Time Shift: Day Job Travel: No Minimum Clearance Required: None Clearance Level Must Be Able to Obtain: None Potential for Remote Work: ORA_REMOTE Description SAIC has an opening for a Senior Detection Engineer. This position is located in Oak Ridge, Tennessee; however, SAIC is open to remote work for qualified candidates. This role serves as a Senior Tec

Full-time

USD 60,001.00 - 100,000.00 per year

Systems Engineer Manager

Chantilly, Virginia

•

Today

Job ID: 2617764 Location: Chantilly, VA, US Date Posted: 2026-10-08 Category: Engineering and Sciences Subcategory: Systems Engineer Schedule: Full-Time Shift: Day Job Travel: Yes - 10% of the time Minimum Clearance Required: TS.SCI_wPoly Clearance Level Must Be Able to Obtain: None Potential for Remote Work: ORA_ON_SITE Description JOB DESCRIPTION: SAIC is seeking a Systems Engineering Manager to fulfill a senior contractor role at a government facility in Chantilly, VA. As a member o

Full-time

USD 180,001.00 - 220,000.00 per year

Information Systems Security Officer Senior

Ashburn, Virginia

•

Today

Job ID: 2616313 Location: Ashburn, VA, US Date Posted: 2026-08-31 Category: Information Technology Subcategory: IT Security Administrator Schedule: Full-Time Shift: Day Job Travel: No Minimum Clearance Required: None Clearance Level Must Be Able to Obtain: Public Trust Potential for Remote Work: ORA_HYBRID Description SAIC is seeking a senior-level Information System Security Officer (ISSO) and/or Alternate Information System Security Officer (AISSO) for one or more major federal IT in

Full-time

USD 120,001.00 - 160,000.00 per year

Senior Cybersecurity Analyst

Washington, District of Columbia

•

Today

Job ID: 2616506 Location: Washington, DC, US Date Posted: 2026-09-03 Category: Cyber Subcategory: Cyber Engineer Schedule: Full-Time Shift: Day Job Travel: No Minimum Clearance Required: None Clearance Level Must Be Able to Obtain: Public Trust Potential for Remote Work: ORA_HYBRID Description SAIC is looking for a Senior Cybersecurity Analyst supports Security Operations functions while helping establish and mature the organization's offensive security capability in support of a criti

Full-time

USD 120,001.00 - 160,000.00 per year

SAIC

Job Details

Skills

SAP GRC
Security Clearance
Event Management
Analytical Skill
Continuous Improvement
Use Cases
Infrastructure Architecture
Testing
Management
Database
Dashboard
Hardening
Change Control
Lifecycle Management
Data Quality
Reporting
Technical Writing
Data-flow Diagrams
Scalability
Operational Efficiency
Computer Science
Information Systems
Normalization
Performance Tuning
SPL
SQL
DSL
Onboarding
Microsoft Windows
Network
Linux
Microsoft Windows Administration
Computer Networking
TCP/IP
Dragon NaturallySpeaking
DNS
HTTP
HTTPS
TLS
Scripting
Python
Windows PowerShell
Bash
Firewall
IDS
IPS
Vulnerability Management
ROOT
Accountability
Communication
Collaboration
Leadership
Kibana
Cloud Computing
Clustering
High Availability
Disaster Recovery
Storage
Optimization
Capacity Management
SIEM
Migration
Elasticsearch
SEO
Analytics
Configuration Management
Git
Continuous Integration
Continuous Delivery
Cyber Security
FISMA
OMB
FedRAMP
Splunk
Security+
CISSP
Information Technology
Systems Engineering
FOCUS

SAP GRC
Security Clearance
Event Management
Analytical Skill
Continuous Improvement
Use Cases
Infrastructure Architecture
Testing
Management
Database
Dashboard
Hardening
Change Control
Lifecycle Management
Data Quality
Reporting
Technical Writing
Data-flow Diagrams
Scalability
Operational Efficiency
Computer Science
Information Systems
Normalization
Performance Tuning
SPL
SQL
DSL
Onboarding
Microsoft Windows
Network
Linux
Microsoft Windows Administration
Computer Networking
TCP/IP
Dragon NaturallySpeaking
DNS
HTTP
HTTPS
TLS
Scripting
Python
Windows PowerShell
Bash
Firewall
IDS
IPS
Vulnerability Management
ROOT
Accountability
Communication
Collaboration
Leadership
Kibana
Cloud Computing
Clustering
High Availability
Disaster Recovery
Storage
Optimization
Capacity Management
SIEM
Migration
Elasticsearch
SEO
Analytics
Configuration Management
Git
Continuous Integration
Continuous Delivery
Cyber Security
FISMA
OMB
FedRAMP
Splunk
Security+
CISSP
Information Technology
Systems Engineering
FOCUS

Summary

Administer, maintain, engineer, and optimize enterprise SIEM platforms, including Splunk Enterprise, Splunk ES, and Elastic / Elastic Security, ensuring availability, performance, reliability, and scalability.
Support SIEM architecture and modernization initiatives, including the transition from Splunk to Elastic, migration of data sources and security use cases, infrastructure design, testing, validation, and operational cutover.
Design, configure, manage, and troubleshoot enterprise log collection and ingestion pipelines, including syslog, Windows Event Collection/Forwarding, SIEM agents and forwarders, network devices, security technologies, applications, databases, and cloud services.
Onboard and normalize security telemetry, ensuring accurate collection, parsing, enrichment, indexing, retention, and searchability using applicable standards such as Splunk Common Information Model (CIM) and Elastic Common Schema (ECS).
Develop, maintain, migrate, and optimize SIEM searches, dashboards, reports, alerts, correlation rules, and security detections using SPL, SQL, and Elastic query technologies.
Monitor and optimize SIEM infrastructure health, ingestion performance, storage utilization, system capacity, and data availability while supporting high availability, disaster recovery, and scalability requirements.
Troubleshoot complex SIEM and logging issues across the complete data path, identify root causes, and implement sustainable solutions to improve reliability and operational effectiveness.
Support SIEM architecture, configuration management, security hardening, change control, automation, and platform lifecycle management in accordance with enterprise and federal requirements.
Collaborate with security analysts, infrastructure teams, application owners, and cybersecurity leadership to improve security visibility, detection capabilities, data quality, and operational reporting.
Develop and maintain technical documentation, including architecture diagrams, data flow diagrams, configuration standards, SOPs, and migration procedures, while providing technical guidance to other team members.
Evaluate emerging SIEM technologies and capabilities, identify opportunities for engineering improvements, and recommend solutions that improve performance, automation, scalability, and operational efficiency.
Take ownership of assigned technical initiatives, communicate progress and risks, and independently drive technical issues and projects through resolution.

Qualifications

Requirements

Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related technical discipline; OR equivalent relevant IT/cybersecurity experience.
9+ years of relevant IT or cybersecurity experience, including at least 3 years of hands-on SIEM administration, engineering, or enterprise logging experience.
Ability to obtain and maintain a Public Trust requiring U.S. Citizenship.
Demonstrated experience administering, engineering, or troubleshooting enterprise SIEM platforms, with hands-on experience in Splunk Enterprise and working knowledge of Elastic or comparable search and analytics technologies.
Strong understanding of SIEM architecture, distributed systems, enterprise logging, data ingestion, parsing, normalization, indexing, retention, and performance optimization.
Proficiency with Splunk Search Processing Language (SPL), working knowledge of SQL, and familiarity with Elastic query technologies such as KQL, ES|QL, EQL, or Query DSL.
Experience onboarding and troubleshooting enterprise data sources, including Windows/Linux systems, network devices, security appliances, applications, and cloud environments.
Strong Linux and Windows administration skills, including working knowledge of networking, TCP/IP, DNS, HTTP/HTTPS, TLS, syslog, and related protocols.
Experience with scripting or automation using Python, PowerShell, Bash, REST APIs, or comparable technologies.
Familiarity with enterprise cybersecurity technologies such as EDR, firewalls, IDS/IPS, identity systems, vulnerability management, and security monitoring platforms.
Demonstrated ability to independently investigate complex technical problems, analyze data, identify root causes, and develop practical engineering solutions.
Strong technical curiosity, initiative, accountability, and ability to learn new technologies while adapting to evolving enterprise requirements.
Excellent written and verbal communication skills, with the ability to document technical solutions and collaborate effectively with technical teams and leadership..

Preferred Qualifications

Hands-on experience with Elastic Stack / Elastic Security, including Elasticsearch, Kibana, Elastic Agent/Fleet, Beats, Logstash, and Elastic query technologies.
Experience with distributed or cloud-based SIEM architectures, including clustering, high availability, disaster recovery, storage optimization, and capacity planning.
Experience supporting enterprise SIEM migrations, particularly Splunk-to-Elastic, including data source migration, detection migration, and operational validation.
Advanced experience with Splunk Enterprise / Splunk ES, including distributed architectures, CIM, search optimization, and platform administration.
Experience with security detection engineering, correlation rules, alert tuning, MITRE ATT&CK, or security analytics development.
Familiarity with configuration management, Infrastructure-as-Code, Git, CI/CD, and automated platform deployments.
Experience supporting cybersecurity operations within federal environments and familiarity with NIST, FISMA, OMB, and FedRAMP requirements.
Relevant technical certifications such as Splunk Enterprise Certified Admin, Splunk Enterprise Certified Architect, Elastic Certified Engineer, Security+, CISSP, or comparable certifications.

Target salary range: $120,001 - $160,000. The estimate displayed represents the typical salary range for this position based on experience and other factors.

Dice Id: 10111346
Position Id: 2618060
Posted 5 days ago

Company Info

About SAIC

Go to company profile

Fitment

Dice Job Match Score™

To see how well you match this job, please log in or create an account.

Once logged in, be sure to complete your profile to get the most accurate match score.

Create job alert

Never miss an opportunity! Create an alert based on the job you applied for.

Similar Jobs

Senior Detection Engineer

Remote

•

Today

Full-time

USD 60,001.00 - 100,000.00 per year

Systems Engineer Manager

Chantilly, Virginia

•

Today

Full-time

USD 180,001.00 - 220,000.00 per year

Information Systems Security Officer Senior

Ashburn, Virginia

•

Today

Full-time

USD 120,001.00 - 160,000.00 per year

Senior Cybersecurity Analyst

Washington, District of Columbia

•

Today

Full-time

USD 120,001.00 - 160,000.00 per year