> Markdown version of [/jobs/ext/4438233-cybersecurity-engineer-managed-siem](https://www.wearedevelopers.com/jobs/ext/4438233-cybersecurity-engineer-managed-siem). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cybersecurity Engineer, Managed SIEM - **Company:** Critical Start - **Location:** Washington, DC, United States (Remote available) - **Experience:** Experienced - **Salary:** $80,000.0 - $110,000.0 - **Contract:** Permanent contract - **Skills:** Application Programming Interfaces (APIs), Amazon Web Services, Microsoft Azure, Bash Shell, Cloud Computing, Cyber Security, Computer Programming, DevOps, Python (Programming Language), Windows PowerShell, Ansible, Security Information and Event Management, Scripting, Data Ingestion, Information Technology, Microsoft Sentinel, Puppet, Terraform, Splunk - **Published:** October 20, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=2383062cfb7f9f1a ## About the Role * Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or equivalent experience and industry certifications. * 2+ years of experience in a cybersecurity engineering role * 2+ years of experience with SIEM tools, specifically Splunk & Microsoft Sentinel. * Proficiency in handling security data sources, log formats, and data ingestion methods. * Experience creating SIEM content such as alerts, reports, and dashboards. * Strong communication and customer service skills. * 2+ years of experience with next-gen antivirus (AV) or endpoint detection and response (EDR) solutions. * Scripting capabilities in languages like Bash, PowerShell, Python, or others. * Ability to establish trust and rapport with customers, even when dealing with complex technical issues. Desired Qualifications: * 2+ years of experience with Cloud Technologies (Azure, AWS, or GCP). * Experience deploying security solutions in an MSSP environment is a plus. * Experience with DevOps tools is a plus (Terraform, Ansible, Puppet, Salt Stack, etc.). * Scripting abilities in Bash, PowerShell, Python, or other programming/scripting languages., * Stationary position for extended periods of time. * Constantly operate a computer. * Occasionally you may be required to move equipment or other items up to 20 lbs. * The ability to communicate information and ideas so others will understand. Must be able to exchange accurate information in these situations. Mental: * Must be able to apply established protocols in a timely manner. * Make timely decisions in the context of workflow. * Ability to complete tasks and perform in situations requiring speed deadlines, or productivity quota. * Ability to work effectively and efficiently in high stress situations. * Ability to simultaneously address multiple complex problems. ## Description Your daily tasks involve configuring data sources and log forwarders, creating custom content (dashboards, workbooks, reports, alerts), conducting thorough environment reviews and gap analyses, and fulfilling advanced SIEM requests. * Maintain Expertise: Stay at the forefront of the industry by continuously updating your knowledge in SIEM tools. * Client Engagement: Deliver our managed services to clients through project-based workflows related to SIEM technologies. * Technical Guidance: Provide technical leadership, expertise, and configuration assistance to both colleagues and clients, helping them maintain robust and effective SIEM security programs. * Technical Development: Collaborate on developing technical pathways to foster growth within the organization and lead cross-functional training sessions. * Best Practices: Create and maintain best practices and assist clients in deploying and configuring security policies, log forwarders, data sources, content, and alerts. * Security Maturation: Assist clients in maturing their SIEM security products in alignment with industry standards and our program offerings. * Problem Resolution: Troubleshoot interactions between data sources and SIEM technologies, as well as API interactions between supported security integrations and our platform (CORR). * Automation: Identify opportunities to automate aspects of SIEM engineering workload, enhancing efficiency and accuracy. * Client Collaboration: Work closely with clients to address technical concerns, provide value reporting, and configure their environments effectively. * Documentation: Develop and maintain comprehensive security documentation, including playbooks, standard operating procedures, and training materials as needed. * Continuous Learning: Stay up-to-date with the latest security threats and trends, incorporating this knowledge into our security solutions. Obtain and maintain relevant security certifications. * Team Collaboration: Collaborate with fellow cybersecurity engineers, product managers, and architects to design and implement innovative security solutions, ensuring the highest level of protection for our clients., Critical Start welcomes people from all backgrounds and walks of life. One of our core values is to "Do what's best for our employees," and that starts with the hiring process by finding the best candidates and providing an environment that upholds equal employment opportunities for all employees and applicants, strictly prohibiting any form of discrimination or harassment based on race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws. This policy encompasses all aspects of employment, including recruitment, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training. Mental and Physical Requirements It's important to note that specific physical and mental requirements may vary depending on the nature of the office job, organization, and individual responsibilities.