Junior SIEM Engineer

Everforth ECS is seeking a Junior SIEM Engineer to work in our Fairfax, VA office.

Job Description:

ECS is currently seeking a motivated and detail-oriented Junior SIEM Engineer to support the Department of Homeland Security (DHS) Continuous Diagnostics and Mitigation (CDM) SIEM as a Service (SIEMaaS). SIEMaaS provides an Elastic Security Information and Event Management (SIEM) platform that supports operationalizing customer SIEM capabilities. CDM is a large, DHS-managed program which comprises several large contracts and various services. The ideal candidate will have experience with Elastic (Elasticsearch, Kibana, Fleet, Logstash) through on the job experience, internships, relevant projects. The junior SIEM engineer will focus on supporting the configuration, maintenance, and optimization of a SIEM platform.

The ideal Elastic SIEM Engineer candidate must be able to work dynamically and proactively both independently and as part of a team to achieve program objectives. The candidate primarily the performs duties of:

• Support and contribute to the creation and maintenance of documentation for SIEM planning and implementation processes, configurations, and procedures to ensure a smooth migration to the SIEMaaS platform.

• Research and recommend relevant data sources to be ingested into the SIEM to support SIEM/SOC mandates and federal standards such as M-21-31.

• Maintain currency on emerging cybersecurity threats and contribute to improving SIEM implementations.

• Participate in assessing SIEM platform health and maturity, including M-21-31 compliance (EL 1-3 maturity assessments).

• US citizenship with ability to obtain and maintain Public Trust Suitability
• Excellent written and verbal communication skills, detail oriented, effective interpersonal skills, strong organization skills, problem-solving ability, attention to detail, technical documentation skills and a strong work ethic that is proactive and self-motivated.
• Consistently seek to improve quality and efficiency.
• Ability to thrive in an evolving environment and work as part of a fast-paced collaborative team.
• Experience with common SIEM technologies with emphasis on Elastic, through on-the-job experience, internships, or projects.
• Experience in leveraging APIs to programmatically query data or manage SIEM platforms.
• Strong analytical skills, ability to research and document findings, and collaborate with cross-functional teams.
• Fundamental understanding of SIEM ingestion data flows and networking concepts.
• Familiarity with federal compliance standards, including M-21-31, and ability to assess maturity and identify areas for improvement.
• Knowledge of the cybersecurity field, including advanced threat landscapes, security protocols, and cyberattack methodologies.