ZipRecruiter

Log In

2

Siem Engineer Remote Jobs in Rosedale, MD (NOW HIRING)

Huntress

Staff Product Manager, SIEM

Columbia, MD · Remote

$230K - $250K/yr

Remote US Compensation: $230,000 to $250,000 base plus bonus and equity What We Do: Cybercrime is ... Work with designers, engineers, and architects to create detailed business requirements, epics, and ...

All JobsSiem Engineer JobsSiem Engineer Remote JobsSiem Engineer Remote Jobs in Rosedale, MD

Siem Engineer Remote information

See Rosedale, MD salary details

$24

$51

$73

How much do siem engineer remote jobs pay per hour?

As of Aug 5, 2026, the average hourly pay for siem engineer remote in Rosedale, MD is $51.44, according to ZipRecruiter salary data. Most workers in this role earn between $41.49 and $59.71 per hour, depending on experience, location, and employer.

What is a SIEM engineer?

A SIEM (Security Information and Event Management) Engineer is an IT security professional responsible for implementing, managing, and optimizing SIEM solutions to protect an organization's information systems. They collect, analyze, and monitor security data from various sources to detect suspicious activities, respond to incidents, and ensure compliance with security policies. Remote SIEM Engineers work from off-site locations, leveraging secure access and communication tools to maintain and troubleshoot SIEM platforms, analyze threat intelligence, and coordinate with security teams to enhance the organization's cybersecurity posture.

How much do SIEM engineers make?

SIEM engineers typically earn between $80,000 and $130,000 annually, depending on experience, certifications, and location. Senior roles or those with specialized skills in tools like Splunk or QRadar can earn higher salaries, especially with additional security certifications such as CISSP or CISA.

What are some common challenges faced by remote SIEM engineers, and how can they be addressed?

Remote SIEM Engineers often face challenges such as maintaining clear communication with security teams, managing alerts across multiple time zones, and ensuring secure access to sensitive systems. To address these, it's important to leverage collaboration tools, establish clear incident response protocols, and use secure VPNs or access controls. Regular virtual meetings and thorough documentation also help keep everyone aligned and ensure swift incident handling.

What are the key skills and qualifications needed to thrive as a SIEM engineer?

To thrive as a SIEM Engineer (Remote), you need strong expertise in cybersecurity principles, log analysis, and incident response, often supported by a degree in information security or related certifications like CompTIA Security+ or CISSP. Familiarity with SIEM platforms such as Splunk, IBM QRadar, or ArcSight, as well as scripting and automation tools, is essential. Excellent problem-solving, communication, and the ability to work independently are crucial soft skills for remote collaboration and timely threat detection. These skills ensure effective monitoring, quick response to security threats, and seamless teamwork in distributed environments.

What is the difference between Siem Engineer Remote vs Security Analyst Remote?

AspectSiem Engineer RemoteSecurity Analyst Remote
Required CredentialsCertifications like CISSP, CEH, or vendor-specific SIEM certificationsCertifications such as CompTIA Security+, CISSP, or GIAC certifications
Work EnvironmentFocus on configuring, managing, and optimizing SIEM tools remotelyMonitoring security alerts, analyzing threats, and incident response remotely
Employer & Industry UsageUsed in cybersecurity firms, large enterprises, and government agenciesCommon across various industries including finance, healthcare, and tech

Both roles involve cybersecurity but differ in focus: Siem Engineers primarily manage SIEM systems, while Security Analysts analyze security data and respond to threats. Both roles are often remote and require relevant certifications, making them closely related in the cybersecurity field.

What job categories do people searching Siem Engineer Remote jobs in Rosedale, MD look for? The top searched job categories for Siem Engineer Remote jobs in Rosedale, MD are:
What cities near Rosedale, MD are hiring for Siem Engineer Remote jobs? Cities near Rosedale, MD with the most Siem Engineer Remote job openings:
Siem Engineer Remote jobs near you

SEIM Engineer, Security Engineer III

Deloitte

Baltimore, MD • Remote

Other

Re-posted 16 days ago

Deloitte rating

8.1

Company rating: 8.1 out of 10

Based on 91 frontline employees who took The Breakroom Quiz

57th of 150 rated financial services

Job description

Deloitte's Cyber Defense and Resilience offering is seeking a SIEM Engineer to support security monitoring, detection engineering, and incident analysis across complex enterprise environments. This role will focus on building and optimizing SIEM content, improving alert fidelity, and helping clients strengthen cyber defense capabilities. The ideal candidate will bring experience with at least one of the following technology areas: Splunk, Palo Alto Networks, or CrowdStrike. This is a remote role with opportunities to work across distributed teams in a fast-paced cybersecurity environment.

Work you'll do

As a SIEM Engineer on the Cyber Defense and Resilience team, you will be responsible for...

  • Configure, maintain, and optimize SIEM content including correlation rules, alerts, dashboards, and reports
  • Analyze security events and log data to identify suspicious activity, support investigations, and improve detection coverage
  • Integrate and normalize log sources from endpoint, network, cloud, identity, and security platforms
  • Partners with cybersecurity teams to support use case development, threat detection, incident triage, and response activities
  • Document detection logic, operational procedures, and monitoring requirements to support consistent service delivery

A successful candidate would possess these skills:

  • Ability to work independently and collaborate as part of a team
  • Effective written and verbal communication skills
  • Meticulous attention to detail and quality of work product
  • Ability to build and sustain professional relationships
  • Ability to lead projects or workstreams
  • Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
  • Strong interpersonal skills and professional demeanor
  • Ability to meet deadlines
  • Ability to provide clear guidance to others

Qualifications

Required:

  • Bachelor's degree in computer science, Cybersecurity, Information Technology, Engineering, or a degree in related technical field
  • 3+ years of experience in cybersecurity, security operations, or SIEM engineering
  • 3+ years of experience with at least one of the following: Splunk, Palo Alto XSIAM, or Crowdstrike NG SIEM
  • Security certification such as Splunk certification, Palo Alto Networks certification, or CrowdStrike certification is required
  • 2+ years' experience in the following areas:
    •  creating, tuning, and maintaining correlation searches, alerts, dashboards, and reports in a Security Information and Event Management platform
    •  reviewing and analyzing logs from endpoint, network, cloud, identity, and application sources
  • Active Secret clearance or higher
  • Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.

Preferred:

  • 2+ years' experience:
    • supporting enterprise monitoring in a Security Operations Center
    • Experience onboarding and normalizing log sources in a Security Information and Event Management platform
    • Experience mapping detections to MITRE ATT&CK techniques
    • Experience with cloud security monitoring in Amazon Web Services, Microsoft Azure, or Google Cloud Platform
    • Hands-on experience with scripting or query languages used for detection and log analysis
  • Security certification such as CompTIA Security+, or GIAC certification

The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $107,925 to $188,900.

You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.

Qualifications:

Deloitte's Cyber Defense and Resilience offering is seeking a SIEM Engineer to support security monitoring, detection engineering, and incident analysis across complex enterprise environments. This role will focus on building and optimizing SIEM content, improving alert fidelity, and helping clients strengthen cyber defense capabilities. The ideal candidate will bring experience with at least one of the following technology areas: Splunk, Palo Alto Networks, or CrowdStrike. This is a remote role with opportunities to work across distributed teams in a fast-paced cybersecurity environment.

Work you'll do

As a SIEM Engineer on the Cyber Defense and Resilience team, you will be responsible for...

  • Configure, maintain, and optimize SIEM content including correlation rules, alerts, dashboards, and reports
  • Analyze security events and log data to identify suspicious activity, support investigations, and improve detection coverage
  • Integrate and normalize log sources from endpoint, network, cloud, identity, and security platforms
  • Partners with cybersecurity teams to support use case development, threat detection, incident triage, and response activities
  • Document detection logic, operational procedures, and monitoring requirements to support consistent service delivery

A successful candidate would possess these skills:

  • Ability to work independently and collaborate as part of a team
  • Effective written and verbal communication skills
  • Meticulous attention to detail and quality of work product
  • Ability to build and sustain professional relationships
  • Ability to lead projects or workstreams
  • Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
  • Strong interpersonal skills and professional demeanor
  • Ability to meet deadlines
  • Ability to provide clear guidance to others

Qualifications

Required:

  • Bachelor's degree in computer science, Cybersecurity, Information Technology, Engineering, or a degree in related technical field
  • 3+ years of experience in cybersecurity, security operations, or SIEM engineering
  • 3+ years of experience with at least one of the following: Splunk, Palo Alto XSIAM, or Crowdstrike NG SIEM
  • Security certification such as Splunk certification, Palo Alto Networks certification, or CrowdStrike certification is required
  • 2+ years' experience in the following areas:
    •  creating, tuning, and maintaining correlation searches, alerts, dashboards, and reports in a Security Information and Event Management platform
    •  reviewing and analyzing logs from endpoint, network, cloud, identity, and application sources
  • Active Secret clearance or higher
  • Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.

Preferred:

  • 2+ years' experience:
    • supporting enterprise monitoring in a Security Operations Center
    • Experience onboarding and normalizing log sources in a Security Information and Event Management platform
    • Experience mapping detections to MITRE ATT&CK techniques
    • Experience with cloud security monitoring in Amazon Web Services, Microsoft Azure, or Google Cloud Platform
    • Hands-on experience with scripting or query languages used for detection and log analysis
  • Security certification such as CompTIA Security+, or GIAC certification

The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $107,925 to $188,900.

You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.

Education:Bachelor's DegreeEmployment Type:

What Deloitte employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

Apply