Information System Security Engineer

Job Description:Seeking an early to mid-career Information Security Systems Engineer (ISSE) to support Security Information and Event Management (SIEM) platforms and related security tools in a managed enterprise environment for federal government customers.This role is primarily focused on SIEM engineering, including platform administration, log and data flow support, content development, and system troubleshooting across Windows and Linux environments.The selected candidate will also provide secondary support for related security tools and applications as needed.The ideal candidate will have hands-on experience with SIEM or centralized logging platforms, a solid foundation in Linux system administration, and a working understanding of networking, log analysis, and enterprise security operations.This role offers the opportunity to build hands-on expertise with enterprise SIEM and security monitoring technologies while supporting mission-critical environments for federal customers.Essential Functions:Administer, maintain, and support SIEM platforms and associated application components in Windows and Linux environmentsDevelop, tune, and maintain SIEM content, including dashboards, reports, alerts, rules, filters, queries, and data viewsSupport log ingestion, onboarding of new log sources, data normalization, and data flow optimization to improve visibility and use case performanceTroubleshoot SIEM platform issues, log collection problems, data flow interruptions, and system performance concernsPerform system administration activities for servers hosting SIEM and related security applicationsUse Linux command-line tools to perform routine administration, troubleshooting, and support tasksAssist with SIEM platform upgrades, patching, configuration changes, and general lifecycle maintenanceApply configuration management and change control practices to maintain system integrity, documentation, and version controlDevelop and maintain technical documentation for system configurations, support procedures, and operational changes in accordance with L3Harris engineering processesCollaborate with internal teams and customers to resolve technical issues and support mission and operational requirementsProvide secondary administration and support for related security tools and applications as assignedParticipate in routine operational support activities, including maintenance, troubleshooting, and after-hours support when required.Qualifications:Bachelor’s degree in Computer Engineering, Cybersecurity, Information Technology, Computer Science, or a related field with a minimum of 2 years of relevant experience; or a graduate degree in a related field with 0-2 years of relevant experience; or an equivalent combination of education and related experienceMinimum of 2 years of experience supporting or administering SIEM, log management, or similar security monitoring platformsHands-on experience using Linux command-line tools to perform system administration or troubleshooting tasksBasic understanding of TCP/IP communications, the OSI model, enterprise data flow concepts, log analysis, event monitoring, and troubleshooting in enterprise IT environmentsExperience following standard engineering, configuration management, or change management practicesAbility to develop and maintain clear technical documentation, including system configurations, procedures, and updates, in accordance with established engineering processesStrong written and verbal communication skillsAbility to work effectively with internal teams, customers, and other technical stakeholdersPreferred Additional Skills:Experience with SIEM platforms such as ArcSight, Splunk, LogRhythm, Exabeam, or similar technologiesExperience supporting security tools or applications in Windows and Linux server environmentsFamiliarity with log parsing, data normalization, filtering, or regular expressionsExperience with scripting or automation using Shell, Python, or similar languagesExperience with Windows system administration in an enterprise environmentFamiliarity with security operations workflows, incident triage, or threat detection conceptsFamiliarity with network security monitoring, intrusion detection, or event correlation conceptsExperience supporting government customers in a regulated or security-focused environmentFamiliarity with NIST SP 800-53, NIST SP 800-171, or similar security control frameworksRelevant certifications such as Security+, Linux+, Network+, SIEM vendor certifications, or similar credentials