Join ECS as a SIEM Infrastructure and Detection Engineer to design, implement, and optimize security information and event management systems that proactively detect and mitigate cyber threats. Your expertise will play a crucial role in enhancing our clients' cybersecurity posture in a remote environment.

ECS is seeking a skilled SIEM Infrastructure and Detection Engineer to join our cybersecurity team. In this role, you will be responsible for architecting and maintaining robust SIEM environments that enable real-time threat detection and response. You will collaborate with cross-functional teams to integrate security data sources, develop advanced detection rules, and ensure the scalability and reliability of our infrastructure.

Key responsibilities include:

• Designing and deploying SIEM solutions tailored to client needs, optimizing for performance and compliance with standards like NIST and GDPR.
• Engineering detection logic to identify anomalies, insider threats, and advanced persistent threats using machine learning and behavioral analytics.
• Performing tuning and maintenance of SIEM systems to minimize false positives and enhance alert accuracy.
• Conducting vulnerability assessments and contributing to incident response playbooks.
• Mentoring junior engineers and staying abreast of emerging cybersecurity trends.

This remote certified position requires the SQL Database Management certification to handle complex data queries essential for SIEM operations. If you are passionate about safeguarding digital assets and thrive in innovative environments, apply today to make an impact at ECS.

• Bachelor's degree in Computer Science, Information Technology, or a related field; advanced certifications in cybersecurity (e.g., CISSP, GIAC) preferred.
• 5+ years of experience in SIEM platforms such as Splunk, ELK Stack, or ArcSight, with hands-on expertise in infrastructure setup and configuration.
• Proficiency in log management, correlation rules, and detection engineering using tools like regex, scripting (Python/Bash), and SIEM query languages.
• Strong understanding of network security, threat intelligence, and incident response methodologies.
• Experience with cloud environments (AWS, Azure) and integrating SIEM with other security tools.
• Excellent problem-solving skills and ability to work collaboratively in a remote team setting.
• Required certification: SQL Database Management for efficient log querying and analysis.

• Competitive monthly salary with performance-based bonuses.
• Comprehensive health, dental, and vision insurance coverage.
• Remote work flexibility with home office setup allowance.
• Professional development opportunities, including certification reimbursements and training programs.
• Generous paid time off, including vacation, sick leave, and holidays.
• 401(k) retirement plan with company matching.
• Access to mental health resources and employee wellness programs.