CALIBRE Systems, inc., an employee-owned Management Consulting and Digital Transformation Company, is seeking a Logging/SIEM Lead to support work in Alexandria, VA.

The Logging/SIEM Lead will provide the following support:

• Design, develop, test, and evaluate information system security throughout the systems development life cycle.

• Test, implement, deploy, maintain, and administer the infrastructure hardware and software.
• Conduct risk assessment and provide recommendations for application design.
• Deeply involved in a wide range of security issues including architectures, firewalls, electronic data traffic, and network access.
• Use encryption technology, penetration and vulnerability analysis of various security technologies, and information technology security research.
• Deeply involved in the design and development of new systems, applications, and solutions for external customer enterprise-wide cyber systems and networks.
• Ensure the logical and systematic conversion of customer or product requirements into total systems solutions that acknowledge technical, schedule, and cost constraints.
• Integrate new architectural features into existing infrastructures, design cyber security architectural artifacts, provide architectural analysis and relate existing system to future needs and trends, embed advanced forensic tools and techniques for attack reconstruction, provide engineering recommendations, and resolve integration/testing issues.
• Provide engineering support for multiple technologies including the support of Microsoft Sentinel, Microsoft Defender, LogRhythm, Tenable, and CrowdStrike.
• Ensure that necessary documentation is accurate and up to date including but not limited to, SOP’s, Work Instructions, Playbooks, and Security Tools Architecture
• Ensure KPI’s and Metrics are tracked and captured for monthly and annual reporting

• U.S. Citizen
• Minimum vetting Tier 5(T5)-Single Scope Background Investigation (SSBI)

• 5+ years of experience with an enterprise Logging and Security Information and Event Management (SIEM) solution, to include log collections, management, correlation, aggregation, ingestion, parsing, use case, dashboard, and triggers development.
• DOD 8570 IAT III Certifications-IA Workforce (IAW) and Computing Environment (CE) certification.

• Demonstrated skills to perform all required duties
• Strong written and verbal communication skills
• Ability to work responsibly and independently with minimal direct supervision

• Experience with standard MS Office suite products and SharePoint
• Experience working in or supporting the Department of Defense

Required Education:

• Bachelor's Degree; prefer a discipline in Computer Engineering

Desired Certifications:

• CISSP or Security +
• SIEM Vendor Certifications or Cloud Certifications