Role Description Summit 7 is seeking an experienced Security Infrastructure Support SIEM & Data Pipeline Technical Lead/SME. The ideal candidate will have extensive experience designing, installing, maintaining, and supporting Enterprise IT systems, with a strong focus on SIEM solutions, data pipelines, and cybersecurity. - Design, install, maintain, and support SIEM solutions and enterprise IT systems. - Develop and manage data collection, log routing, filtering, and transformation tools. - Ensure seamless integration of SIEM solutions into a hybrid infrastructure (on-prem and cloud). - Implement cloud security best practices, including migrations, security hardening, and logging services for Azure, and O365. - Develop and manage reliable data pipelines using CI/CD tools and DevOps practices. - Create and maintain log normalization, data enrichment, and event correlation processes. - Write complex queries using languages like SPL (Splunk) or SQL to analyze and transform data. - Provide detailed verbal and written communication to explain complex security concepts to both technical and non-technical stakeholders as well as executive-level reporting. - Ensure compliance with federal cybersecurity frameworks (FISMA, NIST 800-53, NIST 800-171, OMB M-21-31, CDM). - Collaborate with third-party vendors and cross-functional teams to enhance security practices and system integrations. - Stay updated on the latest trends and best practices in SIEM technologies, data pipelines, and cybersecurity. - Design and evaluate end-to-end systems through their entire life cycle with a focus on Cyber Security and Risk Management. - Ensure products and systems comply with requirements and customer information assurance and cybersecurity standards. - Conduct software and systems engineering and software systems research to develop new capabilities. - Conduct comprehensive technology research to evaluate potential vulnerabilities. - Author strategy for and can perform testing, implementation, maintenance, and administration of the security infrastructure hardware and software. - Address the full range of security issues including architecture, firewalls, electronic data traffic, and network access. - Employ encryption technology, penetration and vulnerability analysis of various security technologies, and information technology security research. - Ensure the logical and systematic conversion of customer or product requirements into total systems solutions that acknowledge technical, schedule, and cost constraints. - Develop cybersecurity engineering architectural artifacts and analyze systems engineering artifacts provided/created by others for future cyber operational concerns. - Participate in special initiatives aimed at addressing critical technical issues and fulfilling organizational needs. - Assist in team onboarding training and the recruiting of new team members. Qualifications - Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field; or equivalent experience. - 5+ years of experience designing, installing, maintaining, and supporting Enterprise IT systems. - 3+ years of specific experience with cybersecurity tools or SIEM implementation and administration. - Expert in cybersecurity process and operational improvements, 5 years. - Functional and operational knowledge of ITSM and Support Tiering, 3 years. - Solution and architecture development concepts and processes, 3 years. - Configuration Management, 1+ years. - Advanced understanding of network security and related security tools and network concepts. - Practitioner experience with Risk Management Frameworks, specifically NIST. - Experience with a hybrid infrastructure (on-prem and cloud) environment. - Demonstrated familiarity with cloud security concepts, services, and operations (Azure, O365), including migrations, security hardening, and related logging services. - In-depth experience with SIEM solutions, data collection tools, and proficiency with log routing, filtering, and transformation tools. - Deep understanding of log formats (CEF, LEEF, JSON, XML), log normalization, data enrichment, and event correlation. - Experience with CI/CD tools and DevOps practices for creating reliable and repeatable data pipelines. - Strong scripting skills, particularly in JavaScript and Python, for automation and pipeline development. - Ability to write complex queries using languages like SPL (Splunk) or SQL. - Demonstrated verbal and written communication skills for explaining complex security concepts such as data pipelines and data dictionaries to technical and non-technical stakeholders as well as executive-level reporting. - Hands-on experience with federal cybersecurity compliance frameworks (FISMA, NIST 800-53, NIST 800-92, OMB M-21-31, CDM). - Strong problem-solving and analytical abilities for identifying and addressing security issues and root causes. - Proven experience working with third-party vendors and cross-functional teams. Requirements - Advanced degree in Computer Science, Information Technology, Cybersecurity, or related field (optional). - Additional relevant certifications such as CISSP, CEH, or SIEM-specific certifications (optional). - Understanding of data governance and the MITRE ATT&CK framework (optional). - Familiarity with automated data management and monitoring tools (optional). - Knowledge of compliance management tools and practices (optional). Benefits - Excellent health/dental benefits from BCBS and Ameritas. - Luxurious VSP vision benefits. - 401k with company matching. - 10 days' vacation, 7 days sick time. - Bonuses and salary increase potential via our certifications plan.