SIEM & Data Pipeline Technical Lead/SME

SIEM & Data Pipeline Technical Lead/SME

SIEM & Data Pipeline Technical Lead/SME

Mbl Technologies

11 hours ago

No application

About

  • Description
  • MBL Technologies, Inc. offers a diverse set of management and technology consulting services to Federal government and commercial markets. Our solutions are tailored to support each client’s mission, accounting for their unique needs and operating environments to ensure success. We bring the right people, capabilities, and expertise together to assist our clients with enabling their mission. Together our individual differences drive successful business results.
  • If you are transitioning from military to civilian life, have prior service, are a retired veteran, or a member of the National Guard or Reserves, or spouse of an active military service member, we encourage you to apply. Please visit our webpage for information on our policies and benefits for the military and veteran community.
  • Why Work with Us?
  • We trust, empower, and believe in our employees to soar to their fullest potential!
  • We offer a robust benefits package (medical, dental, vision, STD, Accident, Life, Hospital Insurance, FSA, HSA, 401K match, professional development stipend, etc.).
  • We love to have fun and give back to the community. Community Service and Employee Engagement events are atop our calendar events!
  • We genuinely like each other and champion everyone to achieve their own greatness!
  • MBL Technologies is seeking an experienced SIEM & Data Pipeline Technical Lead / Subject-Matter Expert (SME) to provide advanced technical leadership and hands-on support for enterprise security monitoring and data integration in hybrid IT environments. The role focuses on SIEM platform administration, data pipeline development, log normalization, and integration of on-premises and cloud-based infrastructure. The successful candidate will collaborate with technical teams and federal stakeholders to ensure secure, efficient, and compliant data operations.
  • This role is mostly remote; however, it will require occasional onsite meetings in the Bethesda, MD area. With no travel reimbursements allocated. This role is contingent based on contract award.

Key Responsibilities

  • Lead design, implementation, and administration of SIEM solutions and associated data pipelines.
  • Manage log ingestion, routing, filtering, transformation, normalization, and enrichment processes across diverse systems.
  • Ensure consistent event correlation and alerting based on normalized and enriched data.
  • Develop, maintain, and optimize data pipelines using CI/CD and DevOps practices for repeatable and reliable data integration.
  • Write complex queries and dashboards using SPL (Splunk), SQL, or equivalent query languages.
  • Ensure integration of cloud logging services and security tools into SIEM platforms for continuous monitoring.
  • Apply knowledge of AWS, Azure, O365, and hybrid IT environments to support secure logging, monitoring, and data collection.
  • Implement security hardening and compliance configurations for cloud-based services and infrastructure.
  • Integrate cloud and on-premises data pipelines with enterprise SIEM and monitoring systems.
  • Serve as the technical lead and SME, providing guidance on SIEM deployment, log normalization, and data pipeline development.
  • Collaborate with cross-functional teams, third-party vendors, and federal stakeholders to implement and maintain SIEM and data operations.
  • Mentor team members on best practices for data ingestion, transformation, and correlation.
  • Provide clear technical communication and reporting to technical teams, non-technical stakeholders, and executive leadership.
  • Ensure SIEM and data pipeline solutions meet federal compliance requirements, including FISMA, NIST 800-53, NIST 800-92, OMB M-21-31, and CDM.
  • Apply knowledge of data governance principles and frameworks such as MITRE ATT&CK for threat modeling and event correlation.
  • Perform root cause analysis of security issues and develop effective solutions to mitigate risks.

Required Qualifications / Skills

  • 10+ years of experience designing, installing, maintaining, and supporting enterprise IT systems.
  • 5+ years of experience at the Senior Engineer level or higher.
  • 3+ years of experience implementing and managing SIEM platforms and cybersecurity tools.
  • Hands-on experience with hybrid IT environments (on-premises and cloud).
  • Deep understanding of log formats (CEF, LEEF, JSON, XML), normalization, enrichment, and correlation.
  • Proficiency with scripting and automation using Python and JavaScript.
  • Experience developing CI/CD pipelines and DevOps workflows for data operations.
  • Ability to write complex queries in SPL, SQL, or equivalent languages.
  • Familiarity with cloud security concepts and operations for AWS, Azure, O365.
  • Hands-on experience with federal compliance frameworks: FISMA, NIST 800-53, NIST 800-92, OMB M-21-31, CDM.
  • Excellent problem-solving, analytical, verbal, and written communication skills.
  • Proven ability to collaborate with third-party vendors and cross-functional teams.

Preferred Qualifications / Skills

  • Bachelor’s degree in computer science, Information Technology, Cybersecurity, or related field.
  • Familiarity with MITRE ATT&CK framework and threat intelligence integration.
  • Prior experience developing dashboards, reporting, and executive briefings for SIEM data.
  • Experience in federal or large-scale enterprise environments with complex security monitoring requirements.

MILITARY OCCUPATIONAL SPECIALTY CODES (MOS codes)

  • 170A, 170D, 17A, 17B, 17C, 17D, 24B, 25B, 47D, 94F, IT, 17 5309, 6203, 9735, 9740, 9890, 9891

CORPORATE CITIZEN

  • MBL Technologies’ vision is to make a positive difference – for our people, our customers, and our communities. As such, a commitment to service and excellence has been woven into the very fabric of our culture. MBL employees demonstrate a willingness to consistently go above and beyond and strive for excellence in all we do – championing, protecting, and celebrating the core business through the mission, vision, and values. All are expected to be good corporate citizens, supporting one another and internal corporate initiatives to build a stable business platform and ensure lasting company success.

Benefits

  • MBL Technologies offers a competitive salary adjusted for candidate qualifications partnered with an industry-leading benefits package. This package includes incentive plans with corporate and individual-based performance bonuses, 401K, PTO, remote work, health and wellness programs, employee discounts, and learning and development reimbursement.

EEO STATEMENT

  • MBL Technologies is an Equal Opportunity Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability, or protected veteran status.