Sr. SIEM Engineer

CGI • Washington, DC

2d

About The Position

CGI Federal is a leader in providing IT and cybersecurity solutions, dedicated to supporting mission-critical defense and intelligence initiatives. We are committed to enhancing national security through innovative technology and expert collaboration. As a Senior Consultant in CGI Federal's cyber practice, you will lead the design, implementation, and continuous improvement of SIEM capabilities for a federal law enforcement agency’s classified environment. This role combines hands-on SIEM engineering with client-facing consulting, translating mission risk into actionable detections, mentoring junior engineers/analysts, and advising stakeholders on monitoring strategy, metrics, and governance.

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• Active Top Secret clearance with SCI eligibility.
• Minimum of seven (7) years in security engineering with four (4) years in SIEM; expertise in Splunk/Elastic/Sentinel.
• One or more of the following certifications: Security+ (or equivalent DoD 8570 IAT Level II) AWS Certified Security - Specialty Certified Cloud Security Professional (CCSP) Certified Information Systems Security Professional (CISSP)

Nice To Haves

• Master’s degree in Computer Science, Cybersecurity, Information Technology, or a related field (or equivalent experience).
• Experience in federal government or diplomatic environment at the department level or experience supporting classified environments within federal law enforcement or Intelligence Community organizations.
• Experience integrating SIEM with IDS, firewalls, and endpoint security tools.
• Experience with SIEM in hybrid/zero-trust architectures.
• Knowledge of NIST cybersecurity frameworks (800-53, 800-171, 800-190).
• Additional cloud security certifications (AWS, Azure, GCP).

Responsibilities

• Design, implement, and support SIEM capabilities for a federal law enforcement agency’s classified data processing systems directorate.
• Monitor, analyze, and correlate security events across classified environments to identify potential threats, vulnerabilities, and anomalous activity.
• Work closely with cybersecurity, network, and systems teams to configure log ingestion, develop detection use cases, tune alerts, and support incident response and forensic investigations.
• Support system authorization and continuous monitoring activities, maintain SIEM documentation, and ensure security monitoring solutions align with federal standards and mission requirements.
• Lead SIEM strategy workshops, roadmap development, and stakeholder presentations.
• Architect log ingestion pipelines, develop correlation rules, dashboards, and KPIs.
• Align monitoring to NIST SP 800-53 and ISCM requirements.
• Extend SIEM coverage to AWS/Azure/GCP and integrate SIEM with SOAR to automate enrichment.
• Establish content lifecycle governance and mentor junior staff.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level