Junior SIEM Engineer

Junior SIEM Engineer at ECS Corporate Services Junior SIEM Engineer at ECS Corporate Services in Fairfax, Virginia Posted in 3 days ago.

Job Description:

Everforth ECS is seeking a Junior SIEM Engineer to work in our Fairfax, VA office.

Job Description:

ECS is currently seeking a motivated and detail-oriented J unior SIEM Engineer to support the Department of Homeland Security (DHS) Continuous Diagnostics and Mitigation (CDM) SIEM as a Service ( SIEMaaS ). SIEMaaS provides an Elastic Security Information and Event Management (SIEM) platform that supports operationalizing customer SIEM capabilities . CDM is a large, DHS-managed program which comprises several large contracts and various services . The ideal candidate will have experience with Elastic (Elasticsearch, Kibana, Fleet, Logstash) through on the job experience, internships , relevant projects . The junior SIEM engineer will focus on supporting the configuration, maintenance, and optimization of a SIEM platform. The ideal Elastic SIEM Engineer candidate must be able to work dynamically and proactively bot h independently and as part of a team to achieve program objectives . Th e candidate primarily the performs duties of: Support and contribute to the creation and maintenance of documentation for SIEM planning and implementation processes, configurations, and procedures to ensure a smooth migration to the SIEMaaS platform. Research and recommend relevant data sources to be ingested into the SIEM to support

SIEM/SOC

m andates and federal standards such as M-21-31 . Maintain currency on emerging cybersecurity threats and contribute to improving SIEM implementations. Participate in assessing SIEM platform health and maturity, including M-21-31 compliance (EL 1-3 maturity assessments). US citizenship with ability to obtain and maintain Public Trust Suitability Excellent written and verbal communication skills, detail oriented, effective interpersonal skills, strong organization skills, problem-solving ability, attention to detail, technical documentation skills and a strong work ethic that is proactive and self-motivated. C onsistently seek to improve quality and efficiency. Ability to t hrive in an evolving environment and work as part of a fast-paced collaborative team. Experience with common SIEM technologies with emphasis on Elastic , through on-the-job experience, internships, or projects. Experience in leveraging APIs to programmatically query data or manage SIEM platforms. Strong analytical skills, ability to research and document findings, and collaborate with cross-functional teams . Fundamental understanding of SIEM ingestion data flows and networking concepts . Familiarity with federal compliance standards, including M-21-31, and ability to assess maturity and identify areas for improvement. K nowledge of the cybersecurity field, including advanced threat landscapes, security protocols, and cyberattack methodologies.