SIEM Lead at Gunnison Consulting Group

Rockville, Maryland, United States -

Full Time

Start Date

Immediate

Expiry Date

15 Jun, 26

Salary

165000.0

Posted On

17 Mar, 26

Experience

10 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

SIEM Architecture, Log Integration, Telemetry Collection, Detection Engineering, Investigation, Response, Log Pipelines, Normalization, Enrichment Workflows, Correlation Rules, Dashboards, Reporting, Tier 3 Expertise, Log Retention, Automation, Python

Industry

Information Technology & Services

Description

Description *This position is contingent on a future opening with Gunnison. Salary: $155,000-$165,000 Work location: Remote. Candidates must be local to the DC area in case of on-site meetings in Rockville, Maryland. The Security Engineering Log/SIEM Lead owns the architecture, integration, and continuous optimization of the enterprise logging and SIEM ecosystem, ensuring comprehensive telemetry collection across endpoints, networks, applications, cloud, and identity platforms to enable high-fidelity detection, investigation, and response. This role engineers and maintains log pipelines, parsers, normalization and enrichment workflows, correlation rules, dashboards, and reporting; partners with security operations to tune detections and reduce false positives; and provides Tier 3 expertise to troubleshoot complex ingestion or analytics issues across heterogeneous data sources. The lead also drives security engineering best practices for log retention, access controls, and compliance reporting; collaborates with infrastructure, application, and identity teams to onboard new data and use cases; and advances automation, scripting, and content development to support threat hunting and continual improvement of security visibility and outcomes. Requirements US Citizenship required Experience in architecture, design, support, maintenance, and expansion of an enterprise log management/SIEM infrastructure in a highly resilient configuration. Experience in monitoring an enterprise log management/SIEM server and agent infrastructure for capacity planning and system optimization. Experience in deployment, configuration and maintenance of log forwarder agents across a variety of UNIX and Windows platforms. Experience in collaboration with a variety of IT Stakeholders in design and maintenance of Production-quality log management/SIEM reports and dashboards to support data analysis and visualization. Experience in creation and maintenance of documentation related to log management/SIEM infrastructure configuration and operational processes. Advanced system administration skills with Linux operating systems. Knowledge of regular expression, scripting, and application development languages (Python skills required, others include, but are not limited to Perl, JavaScript, Linux shell scripting). A high-level of experience and skill relevant to the role Strong project management skills; experience in organizing, planning, and executing large-scale projects from the envisioning stage through to implementation, involving internal personnel, Contractors, and vendors; ability to analyze project needs and determine resources needed to meet objectives in a fast paced, high pressure and relatively complex technical environment Strong analytical and problem-solving skills Strong teamwork and interpersonal skills and the ability to communicate with all management levels High standards of respect for individuals, excellence, and service to the customer Clearance Requirement: Ability to obtain and maintain a Public Trust clearance. The salary range for this position depends upon multiple factors including location, the individual's knowledge, skills, competencies, and experience, and contract-specific budget constraints and organizational requirements. Gunnison Consulting Group's total compensation package also includes bonus and profit-sharing opportunities, depending on company and employee performance. Available employee benefits include: 3 weeks of Personal Leave your first year 11 paid Holidays each year 5 days of Flexible Time Off each year 401(k) company match at 50% up to 10% of your salary Medical, Dental and Vision Insurance Life and Disability Insurance Public Transportation Subsidies Certifications and Training Allowance - $2,500/year! Why Join Gunnison? Gunnison takes on ambitious projects. We target fun, challenging work that requires creative thinking and innovation. Quality is our top priority. Gunnison employee benefits meet or exceed what other companies in the Washington, D.C. metropolitan area offer. There is a great sense of camaraderie at Gunnison. This is an atmosphere we will maintain as we continue to grow. We are growing rapidly and the opportunity for individual professional growth with Gunnison is outstanding. We hire for careers at Gunnison, not to fill a position. Equal Opportunity/Affirmative Action Employer. Must be eligible for employment in the United States. We are unable to sponsor candidates at this time. In 1994 Gunnison began serving the greater Washington, D.C. metro area, focused on tackling our customers' most ambitious technology projects. By creating a culture dedicated to enabling our customers and employees to achieve more than they ever thought they could, the company has thrived for over 25 years.

Responsibilities

The Security Engineering Log/SIEM Lead is responsible for owning the architecture, integration, and continuous optimization of the enterprise logging and SIEM ecosystem to ensure comprehensive telemetry collection for detection and response. This role involves engineering log pipelines, tuning detections, providing Tier 3 support, and driving security engineering best practices for log management and visibility improvement.