Description

You will provide technical leadership for SIEM engineering, log integration, and incident support within the Congressional Budget Office vSOC program.

This role is hybrid.

Responsibilities

• Design and implement log ingestion pipelines across cloud, network, and enterprise systems.
• Configure and maintain Microsoft Sentinel connectors and Defender XDR integrations.
• Ensure proper normalization, schema mapping, and data quality validation.
• Collaborate with SOC analysts to tune detection rules and improve alert fidelity.
• Optimize query performance and detection pipelines for faster response times.

Required Skills

• 8–10+ years of experience in security engineering, SIEM integration, and incident support.
• Hands-on expertise with Microsoft Sentinel and Defender XDR ecosystems.
• Proficiency with Splunk and ELK for log analysis and management.
• Strong knowledge of Azure Log Analytics, AWS CloudTrail, and VPC Flow Logs.
• Advanced proficiency in KQL (Kusto Query Language) and SQL.
• Experience with ServiceNow, Jira, Power BI, and GitHub for workflow and reporting.
• Solid understanding of federal compliance frameworks including NIST SP 800-53, FISMA, and FedRAMP.

Key Skills

Education

Any Graduate