1

Siem Content Developer Jobs (NOW HIRING)

Cyber Security Engineer

Columbus, OH ยท On-site

$90K - $130K/yr

  • Medical

  • Dental

  • Retirement

  • PTO

Vision insurance SarelaTech is seeking a Cybersecurity Engineer to support the Defense Logistics ... Design, develop, and maintain SIEM correlation rules, analytics, dashboards, and detection content ...

Cyber Security Engineer

Columbus, OH ยท On-site

$130 - $170/hr

  • Medical

  • Dental

  • Retirement

  • PTO

Vision insurance SarelaTech is seeking a Cybersecurity Engineer to support the Defense Logistics ... Design, develop, and maintain SIEM correlation rules, analytics, dashboards, and detection content ...

AI Automation Engineer

California, MO ยท On-site

$90 - $130/hr

Hands-on experience with SIEM content development, detection engineering, and tuning techniques * Solid understanding of cloud infrastructure services, such as Amazon Web Services (AWS), Microsoft ...

New

SIEM Engineer

Manhattan, NY ยท On-site

$140K - $160K/yr

  • Medical

  • Dental

  • Vision

  • Life

  • Retirement

  • PTO

SIEM Engineer - Role Overview The SIEM Engineer is responsible for designing, implementing ... Develop and maintain correlation rules, analytics, and detection content. * Create use cases ...

Showing results 21-40

SIEM Content Developer information

See salary details

$29.5K

$116.6K

$129K

How much do siem content developer jobs pay per year?

As of Aug 19, 2026, the average yearly pay for siem content developer in the United States is $116,615.00, according to ZipRecruiter salary data. Most workers in this role earn between $123,000.00 and $128,000.00 per year, depending on experience, location, and employer.

What is a SIEM Content Developer?

A SIEM Content Developer is responsible for designing, creating, and optimizing security information and event management (SIEM) content such as correlation rules, dashboards, alerts, and reports. Their role involves analyzing security events, identifying threats, and enhancing detection capabilities. They work closely with security analysts and engineers to fine-tune SIEM configurations, improve threat detection, and reduce false positives. This role requires expertise in log analysis, threat intelligence, and scripting to customize SIEM solutions for an organization's security needs.

What are the daily responsibilities of a SIEM Content Developer?

Siem Content Developers typically spend their days creating and refining detection rules, correlation searches, and security alerts within SIEM platforms to identify suspicious activities. They work closely with security analysts to understand emerging threats, tune existing content for accuracy, and research new attack techniques to ensure early detection. Regular responsibilities also include analyzing security logs, testing and documenting new rules, and collaborating with IT or incident response teams to translate business risk into technical controls. This collaborative and analytical environment helps foster ongoing professional development and deeper expertise in threat detection.

What are the key skills and qualifications needed to thrive as a SIEM Content Developer?

A successful Siem Content Developer possesses strong cybersecurity expertise, experience with SIEM platforms (such as Splunk, IBM QRadar, or ArcSight), and the ability to write detection rules and correlation logic. Familiarity with scripting languages, threat intelligence sources, and relevant certifications like CISSP or CompTIA Security+ are highly valuable. Excellent problem-solving, collaboration, and communication skills help developers work effectively with security teams and stakeholders. These competencies ensure the development of accurate, actionable detection content, keeping organizations protected from evolving cyber threats.

What cities are hiring for Siem Content Developer jobs?

Cities with the most Siem Content Developer job openings:

What are the most commonly searched types of Siem Content Developer jobs?

The most popular types of Siem Content Developer jobs are:

Infographic showing various Siem Content Developer job openings in the United States as of August 2026, with employment types broken down into 1% Internship, 72% Full Time, 24% Part Time, 1% Temporary, and 2% Contract. Highlights an 72% Physical, 4% Hybrid, and 24% Remote job distribution, with an average salary of $116,615 per year, or $56.1 per hour.

Splunk SIEM Engineer

Resource Management Concepts, Inc.

Crane, IN โ€ข On-site

$95K - $112K/yr

Full-time

Medical, Retirement, PTO

Re-posted 20 days ago


Job description

Position Overview

Resource Management Concepts, Inc. (RMC) provides high-quality, professional services to government and commercial sectors. Our mission is to deliver exceptional management and technology solutions supporting the protection and preservation of the people and environment of the United States of America.

We are seeking a skilled Splunk SIEM Engineer to lead the evolution of our Splunk environment into a fully operational, enterprise-grade Security Information and Event Management (SIEM) platform. This role will be responsible for both the build-out and ongoing operations of the platform, ensuring it delivers reliable, actionable security insights and supports evolving cybersecurity initiatives. This is a hybrid position that requires regular onsite presence in Crane, Indiana.

Key Responsibilities

  • Lead the transformation of the Splunk environment into a fully functional SIEM platform
  • Manage and optimize the data ingestion pipeline:
    • Audit existing data sources for relevance and efficiency
    • Eliminate unnecessary data ingestion to control licensing costs
    • Onboard and integrate new data sources
  • Parse, normalize, and map ingested data to the Splunk Common Information Model (CIM)
  • Configure, maintain, and optimize Splunk Enterprise Security (ES)
  • Configure, maintain, and optimize Splunk security orchestration, automation, and response platform (SOAR)
  • Develop and maintain correlation searches, detections, and use cases
  • Create and tune alerts to improve fidelity and reduce false positives
  • Build dashboards and visualizations for operational awareness and trend analysis
  • Monitor overall platform health and performance
  • Perform system upgrades, patching, and capacity planning
  • Manage intra Splunk certificates
  • Manage the lifecycle of security content:
    • Continuously refine detections and correlation rules
    • Enhance visibility and detection coverage based on emerging threats
  • Ensure consistent SIEM operations regardless of hosting environment or infrastructure ownership
  • Support ongoing security operations and future cybersecurity initiatives

Requirements

Required Qualifications

  • A SecurityX, CASP, or equivalent DoD 8140 IAT-3 certification is required.
  • Security Clearance: An interim DoD Secret security clearance or higher is required to start. Applicant selected may be subject to a security investigation and must meet eligibility requirements for access to classified information.
  • Hands-on experience with Splunk Enterprise and Splunk Enterprise Security (ES)
  • Strong understanding of SIEM architecture, design, and operations
  • Experience with log ingestion, parsing, normalization, and CIM mapping
  • Proficiency in developing correlation searches, alerts, and dashboards
  • Experience tuning SIEM content to reduce false positives and improve detection accuracy
  • Familiarity with data onboarding strategies and license optimization
  • Knowledge of cybersecurity principles, threat detection, and incident response
  • Experience with system administration tasks including patching, upgrades, and performance monitoring

Preferred Qualifications

  • Experience operating Splunk in distributed or multi-tenant environments
  • Knowledge of data pipelines and log forwarding technologies (e.g., syslog, APIs, forwarders)
  • Familiarity with frameworks such as MITRE ATT&CK
  • Experience supporting Zero Trust or advanced security architectures
  • Preferred certifications (e.g., Splunk Certified Admin, Splunk ES Certified, Security+)

Benefits

At RMC, we're committed to your career growth! RMC differentiates itself from other firms through its investment in our employees. We invest our resources to train, certify, educate, and build our employees. RMC can offer you a great place to work with a small company feel and give you the experience, tuition assistance, and certifications that will take your career to the next level. This includes a competitive paid vacation package with 11 paid federal holidays. We also offer high-quality, low-deductible healthcare plans, pet insurance, and a competitive 401K package.

Salary at RMC is determined by various factors, including but not limited to location, a candidate's specific combination of education, knowledge, skills, competencies, and experience, as well as contract-specific requirements. The current salary range for this position will be $95,000 to $112,000 (annually).

#LI-MB1