FCC - Security Engineer / SIEM Engineer

Role Overview

Security Engineer / SIEM Engineer supporting a federal program for the Federal Communications Commission (FCC). This position is remote and requires the ability to obtain Public Trust clearance.

Responsibilities

• Administer, configure, and optimize SIEM platforms and monitoring tools
• Integrate and onboard new data sources; ensure normalization and validation
• Develop and tune detection rules, alerts, and correlation logic to reduce false positives
• Support log management, telemetry pipelines, and enterprise monitoring architecture
• Identify gaps in visibility and recommend enhancements to monitoring coverage
• Collaborate with SOC/NOC teams to improve detection and response
• Perform detection engineering and continuous improvement of monitoring outputs
• Support configuration management and monitoring of security control effectiveness
• Develop and maintain technical documentation, procedures, and engineering baselines
• Participate in incident investigations, threat hunting, and root cause analysis

Requirements

• Bachelor’s degree in cybersecurity, IT, or related field (or equivalent experience)
• Demonstrated experience in enterprise cybersecurity, SIEM engineering, and monitoring environments
• Experience supporting systems of similar scale/complexity/criticality
• Ability to support engineering, monitoring, and operational cybersecurity functions
• Experience with enterprise SIEM platforms (e.g., Splunk, Microsoft Sentinel, QRadar)
• Strong understanding of log management, event correlation, and telemetry pipelines
• Knowledge of cybersecurity frameworks: NIST, RMF, FISMA
• Familiarity with cloud and hybrid environments: Azure, AWS, M365
• Familiarity with EDR, XDR, and network security tools
• Ability to analyze large datasets and identify security trends
• Experience supporting SOC operations and incident response
• Experience with automation and SOAR platforms
• Knowledge of Zero Trust Architecture and modern security frameworks
• Scripting experience: Python and/or PowerShell

Preferred Certifications

• CompTIA Security+ (preferred)
• CISSP (preferred)
• GIAC certifications (e.g., GCIA, GCIH)
• SIEM platform certifications (e.g., Splunk, Microsoft Sentinel, or equivalent)

Clearance

• Ability to obtain/maintain Public Trust clearance