SIEM / Cybersecurity Engineer

Command Post Technologies, Inc. (CPT) is seeking experienced Security Information and Event Management (SIEM) and Cybersecurity Engineers for anticipated opportunities supporting the Defense Advanced Research Projects Agency (DARPA) in Arlington, Virginia.

The selected candidate will support the engineering, configuration, integration, and sustainment of enterprise cybersecurity monitoring and defensive technologies. This position focuses on maintaining visibility across complex network environments, improving threat detection capabilities, and ensuring cybersecurity systems support operational and security requirements., * Engineer, configure, integrate, and maintain SIEM and security monitoring capabilities across enterprise information systems.

• Support centralized collection, normalization, correlation, storage, and analysis of security logs and events.
• Develop and tune detection rules, alerts, dashboards, and reporting capabilities to identify suspicious activity and improve operational visibility.
• Integrate security data from firewalls, intrusion detection and prevention systems, servers, endpoints, directory services, and other network infrastructure.
• Troubleshoot security monitoring tools, resolve data collection and integration issues, and improve detection effectiveness.
• Support deployment, configuration, and sustainment of network security technologies, including firewalls, IDS/IPS, and endpoint protection systems.
• Coordinate with CND analysts, incident responders, network engineers, and system administrators to support cybersecurity operations.
• Assist with vulnerability management, security assessments, configuration validation, and remediation activities.
• Support security incident investigations by providing event data, correlation results, and technical analysis.
• Develop and maintain technical documentation, system configurations, operational procedures, and security monitoring reports.
• Ensure implemented security solutions align with applicable DoD cybersecurity requirements and approved system security baselines.

Candidates should possess hands-on experience with SIEM technologies, security event collection and correlation, network security infrastructure, and the integration of defensive cybersecurity tools., * Final DoD Secret security clearance, with the ability to meet additional task-order security requirements.

• Minimum of 5 years of relevant experience in cybersecurity engineering, SIEM administration, network security, or related technical disciplines.
• Hands-on experience administering, configuring, or engineering SIEM and enterprise security monitoring solutions.
• Experience collecting, parsing, analyzing, and correlating log data from multiple security and infrastructure sources.
• Working knowledge of network protocols, security architecture, firewalls, IDS/IPS technologies, and endpoint security platforms.
• Experience troubleshooting and integrating cybersecurity technologies in enterprise environments.
• Familiarity with Windows and Linux operating systems and common enterprise infrastructure.
• Ability to document technical configurations, communicate findings, and support operational cybersecurity teams., * Experience with Splunk Enterprise Security, Microsoft Sentinel, Elastic Security, or comparable SIEM platforms.
• Experience developing detection logic, correlation rules, dashboards, and automated alerting workflows.
• Familiarity with Splunk Processing Language (SPL), Kusto Query Language (KQL), Python, or PowerShell.
• Experience with ACAS, ESS/HBSS, STIG compliance, and DoD defensive cybersecurity tools.
• CompTIA Security+, CySA+, CISSP, GCIA, or relevant vendor certification.
• Experience supporting classified networks, DoD cybersecurity operations, or CSSP environments.
• Familiarity with security automation, log retention requirements, and continuous monitoring processes.
• Prior experience supporting DARPA or another DoD research and development organization.

Work Location and Schedule

Anticipated work location is Arlington, VA. Specific onsite requirements, operational schedules, and travel will be established by individual task orders.

This requisition supports anticipated task-order opportunities under an awarded contract vehicle. Employment is contingent upon task-order award, funding, and position availability.

• Leadership training
• 401k with generous company matching
• Employee Stock Ownership Plan (ESOP)
• Career professional development
• Tuition reimbursement
• Flexible hours
• Work/Life balance
• Rewards and recognition
• Paid Time Off
• Parental Leave

About us: We are Command Post Technologies, Inc. (CPT). CPT is a Service-Disabled, Veteran-Owned Small Business (SDVOSB), providing engineering services in the areas of Cyber Security, Software Development, Test & Evaluation, and Strategic Planning. CPT employees appreciate working in a caring environment that promotes a healthy work-life balance. As individuals, we come together as a team, supporting a culture rooted in our core principles of integrity, determination, and innovation. In all of CPT’s collaboration efforts, our team prioritizes communication, accountability, and being resourceful in order to maximize efficiency and results., Command Post Technologies, Inc. (CPT) is a Service-Disabled Veteran-Owned Small Business (SDVOSB) founded in 2008 and headquartered in Suffolk, VA with personnel in various states including Virginia, Maryland, Florida, and Texas. With 2/3 of our staff being former military, CPT firmly believes in employing veterans. Command Post Technologies, Inc. is a unique provider of innovative solutions that enhance our corporate clients’ productivity and empower our government clients with the ability to protect against all enemies: foreign and domestic. CPT adapts its successful military experiential approach to the needs of leaders in a global business environment and provides an elite leadership curriculum that results in a world-class, leadership-altering event.