Enterprise Logging Solution (ELS) Engineer
Core
Engineer supporting the Enterprise Logging Solution (ELS)/SIEM environment for centralized security monitoring, audit, and reporting across architecture, implementation, and operations.
Role type
Senior IC security engineering (SIEM/ELS)
Builds
Centralized security monitoring and audit/reporting capabilities for federal agencies
Domain
Cybersecurity / Federal Government
Deliverable
dashboards & analysis
Required skills
SIEM administration, streaming data ingestion, cloud/on-premise architecture, correlation rule development, ML/AI integration, dashboard creation, change management
Preferred skills
Splunk Certified Admin
Technologies
SIEM, streaming ingestion, cloud, on-premise, ML/AI
Responsibilities
Analyze, develop, and test ELS/SIEM enhancements; migrate/implement architecture in cloud and/or on-premise; onboard new systems into the ELS/SIEM; create dashboards for stakeholders; maintain SIEM data collection and aggregation; develop correlation rules and signatures; integrate ML/AI capabilities; provide user support for dashboards and respond to system-outage issues.
