Security Information & Event Management (SIEM) SME

Leidos

Confirmed live today High trust

Quick summary

Work type: On-site
Location: Shiloh, ILColumbus, OH
Salary: $107,900–$195,050 / yr
Employment: Full-time
Posted: 7 days ago
Freshness: Confirmed live today
Nearby: 99+ roles within 25 mi

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $184k

This role $151k

$94k $239k

below market most similar roles pay here above market

This role pays less than 75% of similar roles. Most pay $151,493–$216,065 — the blue band above. At the midpoint, this role pays about $151k versus about $184k for comparable roles.

Based on 240 similar postings.

Employer

About Leidos

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations.

Leidos currently has 426 open roles on FindRole.

Listed pay typically runs $92,300–$166,850 across 344 roles with salary data.

Most-posted roles

View all roles at Leidos

At a glance

TL;DR · Security Information & Event Management (SIEM) SME

Role Posting Log in to save

The Security Information & Event Management (SIEM) SME joins the Digital Modernization sector to support the GSM-O II program. This role provides network operations and cyber defense support for the Defense Information Systems Agency, impacting Department of Defense and Combatant Commands networks. You will maintain and support active and upcoming SIEM platforms, administer enterprise analytics across their lifecycle, and research advanced detections to develop defensive solutions. Key responsibilities include training analysts, creating visualizations, and coordinating with government stakeholders to integrate emerging capabilities. Required skills include expertise in Elastic/Kibana, MDE/Sentinel, Tines, and Darktrace, alongside experience in CND, threat lifecycle analysis, and networking protocols like TCP/IP. You will also utilize Linux/Windows administration, scripting, and API development to identify and counter Advanced Persistent Threats within a computer incident response environment.

Skills

SIEM Kibana Sentinel MDE Tines Darktrace Splunk Detection-as-Code Linux Windows Unix API Development TCP/IP Netflow Full Packet Capture Malware Analysis Cyber Kill Chain Scripting

What you'll do

Maintain and support active and upcoming enterprise SIEM platforms across their entire lifecycle.
Research advanced analytics, visualizations, and exploits to develop actionable defensive solutions.
Train cyber security analysts on the operation and usage of SIEM tools.
Identify, report, and track SIEM outages and complex technical issues.
Coordinate with government stakeholders to integrate emerging cyber capabilities.
Deliver complex technical reports detailing analytic findings and operational readiness.
Create analytics, visualizations, and operational workflows to empower security analysts.

What we're looking for

Active DoD Top Secret clearance with the ability to obtain and maintain a TS/SCI.
Must reside within a 2-hour commute of Columbus, OH, for a 100% on-site role.
Current DoD 8570 IAT Level II certification and ability to obtain a CSSP-Analyst certification within 180 days.
Bachelor's degree in a related discipline and 8+ years of applicable experience (additional experience accepted in lieu of degree).
Deep architectural, engineering, and operational expertise with enterprise SIEM platforms and hands-on CND experience.
Advanced networking knowledge and experience analyzing high-volume logs, Netflow, Full Packet Capture, and attack artifacts.
Prior background supporting DISA and DoD networks identifying and countering Advanced Persistent Threats (preferred).
Experience in Linux/Windows systems administration, scripting, API development, and Detection-as-Code principles (preferred).

Save