> Markdown version of [/jobs/ext/2641950-siem-engineer](https://www.wearedevelopers.com/jobs/ext/2641950-siem-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# SIEM Engineer

- **Company:** Zachary Piper
- **Location:** Newington, VA, United States
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Bash Shell, Cyber Security, Linux, Domain Name System (DNS), Hypertext Transfer Protocols (HTTP), Intrusion Detection Systems, Python (Programming Language), Network Protocols, Windows PowerShell, Security Information and Event Management, TCP/IP, Scripting, Cloud Platform System, Mitre Att&ck, QRadar, Firewalls (Computer Science), Information Technology, ArcSight Event Correlation, Cyber Warfare, Splunk
- **Published:** August 31, 2026
- **Apply:** https://www.clearancejobs.com/jobs/9130858/siem-engineer

## About the Role

* 3+ years of experience in SIEM engineering, cybersecurity monitoring, security analytics, or a related cyber defense function
 * Hands-on experience with SIEM platforms, log management, event correlation, alert tuning, and security analytics tools
 * Strong understanding of security logs, networking protocols (TCP/IP, DNS, HTTP/S), cybersecurity frameworks such as NIST and MITRE ATT&CK, and scripting with Python, Bash, or PowerShell
 * Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field (or equivalent experience)
 * Active TS/SCI security clearance

## Description

* Configure, maintain, and optimize SIEM platforms such as Splunk Enterprise Security and IBM QRadar
 * Develop and enhance SIEM use cases, detection content, correlation rules, and alerting logic
 * Analyze and correlate security events across multiple data sources, including Windows, Linux, network, firewall, IDS/IPS, and cloud environments
 * Tune alerts and improve monitoring capabilities to reduce false positives and increase threat detection effectiveness
 * Support incident investigations, threat hunting activities, and integration of threat intelligence data


## Related Videos

- [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture)
- [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker)
- [Better Together: Leveraging Your Observability Tools as a SIEM](https://www.wearedevelopers.com/videos/2118-better-together-leveraging-your-observability-tools-as-a-siem)
- [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Discover the open source trio you didn’t expect: .NET and PostgreSQL on Linux](https://www.wearedevelopers.com/videos/2042-discover-the-open-source-trio-you-didn-t-expect-net-and-postgresql-on-linux)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers)