ECS is seeking a SIEM Infrastructure and Detection Engineer to work in our Portland, Oregon office.
The SIEM Infrastructure and Detection Engineer supports a federal energy sector cybersecurity program by engineering, maintaining, and optimizing the SIEM infrastructure and security monitoring platform, including detections, visualizations, dashboards, and reporting. This role ensures the reliability and effectiveness of SIEM and related monitoring tools to meet Information Security Continuous Monitoring (ISCM) and Department of Homeland Security (DHS) Continuous Diagnostics and Mitigation (CDM) requirements. The engineer works directly with security analysts, system owners, and DHS CDM teams to ensure continuous visibility, timely detection, and compliance with federal cybersecurity standards.
Core Capabilities
- Lead the design, deployment, and monitoring of enterprise SIEM platforms (e.g., Splunk, Elastic Stack)
- Architect, implement, and maintain integrations with enterprise systems, cloud environments, and security tools (e.g., EDR, IDS/IPS, firewalls, TIP)
- Develop and optimize dashboards, alerts, and data pipelines
- Automate platform tasks and SIEM processes using scripting (e.g., Python, PowerShell, bash)
- Monitor and tune platform performance to ensure high availability and accuracy of security data
- Troubleshoot and resolve platform-related issues in coordination with analysts and engineers
- Collaborate with federal stakeholders to align SIEM capabilities with ISCM and CDM reporting requirements
- Maintain documentation of platform configurations, standard operating procedures, and system baselines
- U.S. Citizenship with ability to obtain and maintain a DOE “L” clearance
- Hands-on experience with at least one enterprise SIEM platform (Splunk, Elastic, QRadar, or LogRhythm)
- Experience integrating SIEM with enterprise IT systems, cloud platforms, or endpoint detection tools
- Experience onboarding diverse log sources (network, endpoint, cloud, SaaS) and tuning correlation rules
- Proficiency in scripting (Python, PowerShell, or Bash) for automation and data integration
- A Bachelor's or equivalent and minimum 5 years of experience in cybersecurity engineering and security monitoring, including 3+ years dedicated to SIEM engineering
Top Skills
What We Do
ECS, a segment of ASGN (NYSE: ASGN), delivers advanced solutions and services in cloud, cybersecurity, artificial intelligence (AI), machine learning (ML), application and IT modernization, and science and engineering. The company solves critical, complex challenges for customers across the U.S. public sector, defense, intelligence and commercial industries.
ECS maintains partnerships with leading cloud, cybersecurity, and AI/ML providers and holds specialized certifications in their technologies.
Headquartered in Fairfax, Virginia, ECS has more than 3,400 employees throughout the U.S. and has been recognized as a Top Workplace by The Washington Post for the last five years.
