6+ years of cybersecurity experience, primarily in SIEM engineering for enterprise environments.
Experience with federal government systems at multiple security levels.
Hands-on experience with enterprise SIEM platforms.
Experience in classified or air-gapped environments.
Proficiency in log normalization, correlation rule development, and threat detection engineering.
Responsibilities
Support architecture and engineering of SIEM platforms for cyber operations and threat detection.
Manage and maintain network firewalls and security devices, including IDS and SIEM systems.
Integrate diverse log sources from multiple security devices and cloud environments.
Optimize performance and storage architecture of SIEM systems.
Benefits
Opportunity to work on mission-critical cybersecurity initiatives.
Engagement with advanced threat detection and incident response activities.
Work in a secure and highly regulated environment.
Potential for professional development and growth in a specialized field.
Full Job Description
4361 SIEM Engineer 4361 | Top Secret
Job Description:
OVERVIEW:
We are seeking an experienced SIEM (Security Information and Event Management) Engineer to provide support to a mission critical customer. The selected candidate will be responsible for the design, deployment, configuration, and maintenance of SIEM systems across multiple classification enclaves.
GENERAL DUTIES:
Support the architecture, engineering, optimization, and sustainment of Security Information and Event Management (SIEM) platforms supporting defensive cyber operations, advanced threat detection, incident response, and compliance initiatives
Perform configuration, management and maintenance of network firewalls, security and encryption devices, including IDS, NAC and SIEM systems.
Integrate diverse log sources including firewalls, IDS/IPS, EDR, servers, network devices, security appliances, and cloud environments.
Optimize SIEM performance, storage architecture, data retention policies, and system scalability.
REQUIRED QUALIFICATIONS:
6+ years of cybersecurity experience, with at least 5 years focused on SIEM engineering in enterprise environments.
Experience supporting federal government systems at multiple security levels, strong knowledge of federal cybersecurity frameworks, and the ability to provide technical support within a secure environment.
Hands-on experience with one or more enterprise SIEM platforms.
Experience engineering and sustaining SIEM solutions in classified or air-gapped environments.
Familiarity with cross-domain solutions and secure data transfer controls.
Strong expertise in:
Log normalization and parsing
Advanced correlation rule development
Threat detection engineering
Network protocols and traffic analysis
Windows and Linux security logging
DESIRED QUALIFICATIONS:
Bachelor's degree in Information Technology, Computer Science, Information Systems or related field
Proficiency in scripting/automation (Python, PowerShell, Bash).
Deep understanding of MITRE ATT&CK and threat detection methodologies.
Demonstrated ability to work independently and lead technical initiatives in highly regulated environments.
Knowledge of Zero Trust architecture principles.
Relevant certifications such as GIAC (GCIA, GCIH, GCED) or CISSP a plus, but not required.
CLEARANCE:
Top Secret minimum, with the ability to obtain SCI accesses
Job Details
City : Washington
State : District of Columbia
About New Jersey Transit
New Jersey Transit Corporation, branded as NJ Transit, is a state-owned public transportation system that serves the US state of New Jersey, along with portions of New York State and Pennsylvania. It operates bus, light rail, and commuter rail services throughout the state, connecting to major commercial and employment centers both within the state and in the adjacent major cities of New York and Philadelphia. NJ Transit also provides bus service to the Port Authority Bus Terminal in Manhattan. NJ Transit is headquartered in Newark, New Jersey.
