> Markdown version of [/jobs/ext/2706036-siem-security-information-and-event-management-engineer](https://www.wearedevelopers.com/jobs/ext/2706036-siem-security-information-and-event-management-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # SIEM (Security Information and Event Management) Engineer - **Company:** AnaVation, LLC - **Location:** Washington, DC, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Bash Shell, Cyber Security, Information Systems, Data Retention, Data Security, Networking Hardware, Intrusion Detection and Prevention, Intrusion Detection Systems, Python (Programming Language), Linux Security Modules, Network Protocols, Parsing, Windows PowerShell, Zero Trust Network Access, Security Information and Event Management, Traffic Analysis, Data Logging, Cloud Platform System, In-Plane Switching (IPS), Mitre Att&ck, Firewalls (Computer Science), Storage Technologies, Information Technology, Cyber Warfare, Network Server - **Published:** September 4, 2026 - **Apply:** https://startup.jobs/siem-engineer-anavation-7830690 ## About the Role * 6+ years of cybersecurity experience, with at least 5 years focused on SIEM engineering in enterprise environments. * Experience supporting federal government systems at multiple security levels, strong knowledge of federal cybersecurity frameworks, and the ability to provide technical support within a secure environment. * Hands-on experience with one or more enterprise SIEM platforms. * Experience engineering and sustaining SIEM solutions in classified or air-gapped environments. * Familiarity with cross-domain solutions and secure data transfer controls. * Strong expertise in: * Log normalization and parsing * Advanced correlation rule development * Threat detection engineering * Network protocols and traffic analysis * Windows and Linux security logging * Active TS clearance with the ability to obtain SCI accesses., * Bachelor's degree in Information Technology, Computer Science, Information Systems or related field * Proficiency in scripting/automation (Python, PowerShell, Bash). * Deep understanding of MITRE ATT&CK and threat detection methodologies. * Demonstrated ability to work independently and lead technical initiatives in highly regulated environments. * Knowledge of Zero Trust architecture principles. * Relevant certifications such as GIAC (GCIA, GCIH, GCED) or CISSP a plus, but not required. Benefits ## Description AnaVation is seeking an experienced SIEM (Security Information and Event Management) Engineer to provide support to a mission critical customer. The selected candidate will be responsible for the design, deployment, configuration, and maintenance of SIEM systems across multiple classification enclaves., · Support the architecture, engineering, optimization, and sustainment of Security Information and Event Management (SIEM) platforms supporting defensive cyber operations, advanced threat detection, incident response, and compliance initiatives · Perform configuration, management and maintenance of network firewalls, security and encryption devices, including IDS, NAC and SIEM systems. · Integrate diverse log sources including firewalls, IDS/IPS, EDR, servers, network devices, security appliances, and cloud environments. · Optimize SIEM performance, storage architecture, data retention policies, and system scalability. This position is on site with the customer in Washington, DC and cannot be supported remotely. The selected candidate must possess an active TS clearance with the ability to obtain SCI accesses. Candidates without an active TS cannot be considered. ## Related Videos - [Better Together: Leveraging Your Observability Tools as a SIEM](https://www.wearedevelopers.com/videos/2118-better-together-leveraging-your-observability-tools-as-a-siem) - [Old tools, new tricks](https://www.wearedevelopers.com/videos/1916-old-tools-new-tricks) - [Tips and Tricks for Working with JSON](https://www.wearedevelopers.com/videos/1229-tips-and-tricks-for-working-with-json) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [MCP doesn’t suck — your agent does](https://www.wearedevelopers.com/videos/100202-mcp-doesn-t-suck-your-agent-does) - [Building a Compiler with C#](https://www.wearedevelopers.com/videos/116-building-a-compiler-with-c) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)