Data Log Engineer

Join SAIC's team and play a pivotal role in defending North America. We are

seeking an experienced Log Data Engineer onsite in Colorado Springs, CO to

manage the scaling, performance, ingestion pipelines, and analytical detection

rules of N&NC’s multi-enclave Security Information and Event Management (SIEM)

and monitoring architectures for the critical North American Aerospace Defense

Command and United States Northern Command (N&NC) Information Technology (IT)

Enterprise Services (NITES) contract.

In this role, you will

• streamline security operations by decoupling complex
• cyber-data engineering, such as parser creation, index policy management, data
• routing, and telemetry forwarding, from front-line SIEM security analysts. Your
• highly specialized work ensures that the team operates with optimal,
• high-fidelity log feeds, lightning-fast search capabilities, and stable,
• compliant log forwarding to the DoD Big Data Platform (BDP), providing N&NC
• leadership with reliable, real-time cyber situational awareness.

Responsibilities

• * Design, deploy, and maintain custom data parsers and ingestion pipelines
• within the Security Onion architecture to normalize and ingest-route security
• telemetry across five separate security networks (NIPRNet, SIPRNet, SIPR-REL,
• NEN, and CENTRIXS-Mex), preventing data corruption or ingestion gaps.
• * Engineer and implement indexing policies, lifecycle management rules, and
• cluster configurations to handle massive volumes of incoming events,
• maximizing local storage retention and guaranteeing optimal database
• performance during high-urgency security incident queries.
• * Configure and optimize high-throughput forwarding pipelines to securely
• transmit cyber telemetry to the DoD Big Data Platform (BDP) and other
• DoD-approved Enterprise services without disrupting local network operations.
• * Engineer, test, and refine automated alarm rules and Intrusion Detection
• System (IDS) signatures to counter emerging threats and active adversary
• tactics.
• * Continuously calibrate the SIEM to ensure it captures advanced threats while
• filtering out noisy, irrelevant alerts.
• SAIC® [http://www.saic.com/] is a premier mission integrator focused on
• advancing the power of technology and innovation to serve and protect our world.
• Our robust portfolio of offerings across the defense, space, intelligence, and
• civilian markets includes secure high-end solutions in mission IT, enterprise
• IT, engineering services, and professional services. We integrate emerging
• technology, rapidly and securely, into mission critical operations that
• modernize and enable critical national imperatives.
• We are approximately 23,000 strong; driven by mission, united by purpose, and
• inspired by opportunities. SAIC is an Equal Opportunity Employer. Headquartered
• in Reston, Virginia, SAIC has annual revenues of approximately $7.3 billion. For
• more information, visit saic.com [http://www.saic.com/]. For ongoing news,
• please visit our newsroom [http://www.saic.com/who-we-are/newsroom/].