Peraton is currently seeking an experienced Cyber Data Analytics and SIEM Lead to become part of Petatons' Department of State (DoS) Diplomatic Security Cyber Mission (DSCM) program providing leading cyber and technology security experience to enable innovative, effective and secure business processes.

Location: Rosslyn, VA or Beltsville, MD. Hybrid role, must be local to be able to be on site as needed.

As the Leader of our Cyber Data Analytics and SIEM team, you will oversee the maintenance and modernization of security information and event management solutions. This distinguished leader will transform our Data Analytics landscape by driving the transition to state-of-the-art, cloud-based SIEM and Data Lake solutions.

The ideal candidate has:

• Extensive experience in designing, building, and maintaining SIEM systems, with a strong understanding of transitioning from legacy infrastructures to cloud-based data lakes.
• Proven ability to collaborate with incident response teams to gather and understand their requirements, ensuring SIEM solutions effectively support threat detection and response.
• Demonstrated expertise in integrating new technologies and data analytics techniques to enhance cybersecurity infrastructure.
• Strong leadership and mentoring skills, with a track record of guiding engineering teams to successful project outcomes and professional growth.

What you’ll do:

• Oversee the development and implementation of advanced security information and event management (SIEM) solutions.
• Guide a team of skilled engineers to design, build, and maintain robust SIEM systems.
• Ensure the continuous operation and optimization of SIEM systems.
• Integrate new technologies to enhance cybersecurity infrastructure.
• Lead the transition from a legacy SIEM infrastructure to a cloud-based data lake.

Requirements:

• Bachelor’s degree and a minimum of 10 years’ of relevant experience. An additional 4 years of experience can be substituted in lieu of the degree requirement. 
• Knowledge of Cribl, Splunk, and/or Data Bricks.
• Experience in Cyber Analytics, XDR, and Cloud Data Management.
• Ability to obtain/maintain prior to start date ONE of the following certifications: 
• CCNA-Security, CND, CySA+, GICSP, GSEC, Security+ CE, or SSCP
• U.S. citizenship and an active Secret security clearance with the ability to obtain a final Top Secret clearance.