Posting Title

Cybersecurity SIEM Engineer

.

Location

Remote

.

Position Type

Regular

.

Hours Per Week

40

.

Working at NREL

From day one at NREL, you’ll connect with coworkers driven by the same mission to save the planet. By joining an organization that values a supportive, inclusive, and flexible work environment, you’ll have the opportunity to engage through our ten employee resource groups, numerous employee-driven clubs, and learning and professional development classes.

NREL supports inclusive, diverse, and unbiased hiring practices that promote creativity and innovation. By collaborating with organizations that focus on diverse talent pools, reaching out to underrepresented demographics, and providing an inclusive application and interview process, our Talent Acquisition team aims to hear all voices equally. We strive to attract a highly diverse workforce and create a culture where every employee feels welcomed and respected and they can be their authentic selves.

Our planet needs us! Learn about NREL’s critical objectives, and see how NREL is focused on saving the planet.

Note: Research suggests that potential job seekers may self-select out of opportunities if they don't meet 100% of the job requirements. We encourage anyone who is interested in this opportunity to apply. We seek dedicated people who believe they have the skills and ambition to succeed at NREL to apply for this role.

Job Description

The Cybersecurity SIEM (Security Information Event Management) Engineer administers and tunes the technology required to detect and analyze cybersecurity threats for maximum value and effectiveness. The ideal candidate is a self-starter and strong collaborator with multiple years’ experience installing and maintaining SIEMs and related components such as log aggregators and forwarders. Prior experience and/or familiarity with cybersecurity testing, incident response, or analysis is a plus.

- Operates and maintains SIEM tools and components, such as log aggregators, forwarders, and data observability systems.

- Tests, implements, and tunes new on-premises and cloud-based technical environments that support infrastructure visibility, analysis, automation, and secure data retention.

- Develops content that enables cybersecurity personnel to take the maximum advantage of existing tool capabilities, including workflows, integrations, and automated tasks.

- Collaborates across Information Technology Services teams to integrate SIEM components with cybersecurity enrichment and analysis platforms and systems management tools.

- Creates and maintains architectural documentation and operational procedures that describe the scope, purpose, configuration, use and maintenance of the SIEM tools and environments.

- Contributes to projects (as assigned or independently) that improve the effectiveness and efficiency of NREL's cybersecurity program, including but not limited to, workflow improvements, automation expansion, management tool enhancements, program or NREL strategic initiatives, and user awareness training.

.

Basic Qualifications

Relevant Bachelor's Degree and 5 or more years of experience or equivalent relevant education/experience. Or, relevant Master's Degree and 3 or more years of experience or equivalent relevant education/experience. Or, relevant PhD or equivalent relevant education/experience. Complete understanding and wide application of principles, concepts and techniques in specific field. General knowledge of related IS disciplines. Strong leadership and project management skills. Skilled in analytical techniques, practices and problem solving. Advanced programming, design and analysis abilities with various computer software programs and information systems.

* Must meet educational requirements prior to employment start date.

Additional Required Qualifications

Standard requirements for all Cyber positions:

- Ability to perform research, read documentation, and independently l