Enterprise Logging Solution (ELS) Engineer (Mid)
Core
Design, develop, and maintain centralized security monitoring and audit/reporting capabilities (ELS/SIEM) for US federal agencies, integrating streaming ingestion and ML/AI.
Role type
Senior IC Security Engineer (SIEM/ELS)
Builds
Centralized security monitoring and audit/reporting solutions for federal agencies
Domain
Cyber Security / Federal Government
Deliverable
production ML models
Required skills
SIEM architecture, streaming data ingestion, correlation rule tuning, ML/AI integration, dashboard development, gap analysis, change management
Preferred skills
Splunk Certified Admin
Technologies
SIEM, streaming processing, cloud/on-premise environments, IDS, firewall, proxy, DLP, antivirus, vulnerability scanners
Responsibilities
Analyze, develop, and test ELS/SIEM enhancements; Architect and integrate streaming processing solutions; Create dashboards for stakeholders; Develop correlation rules, signatures, and risk-based scoring; Develop, deploy, and integrate ML and AI; Provide user support for dashboards and respond to system outages.
Seniority
Senior, hands-on IC