[Skip to main content](#main-content)

[ OpenNash ](https://opennash.com/) / [Jobs](https://jobs.opennash.com/) [ 01 Search jobs](https://jobs.opennash.com/search/)[ 02 Companies](https://jobs.opennash.com/explore/)[ 03 Hiring report](https://jobs.opennash.com/reports/hiring/)[ 04 AI assistants](https://jobs.opennash.com/connect/)[ 05 How it works](https://jobs.opennash.com/methodology/)

Leidos · Shiloh, IL

# Security Information & Event Management (SIEM) SME

Shiloh, IL $107,900.00 - $195,050.00 Security 

Listed on Leidos’s official careers site. Posted November 5, 2026. Check that it is still open and apply there.
[Apply on Leidos’s careers site →](https://leidos.wd5.myworkdayjobs.com/External/job/Shiloh-IL/Security-Information---Event-Management--SIEM--SME_R-00194726)

[OpenNash Jobs](https://jobs.opennash.com/) / [Leidos](https://jobs.opennash.com/companies/leidos/) / Security Information & Event Management (SIEM) SME

## Job description

Are you ready to support critical defensive cyber operations across national defense networks? Leidos' Digital Modernization sector is seeking a Security Information and Event Management Subject Matter Expert to join the GSM-O II program. In this role, you will provide vital network operations and cyber defense support to the Defense Information Systems Agency (DISA), directly impacting the Department of Defense (DoD) and Combatant Commands (COCOMs).

This role is located at Scott Air Force Base, IL and has a 100% on site requirement. As the SIEM SME, you will actively engage with customers and mission partners, maintain and support current and future SIEM platforms, ensure critical data feeds and operational readiness, and empower cyber security analysts through the creation of analytics, visualizations, and operational workflows. What You Will Do (Primary Responsibilities)
- Maintain and support active and upcoming SIEM platforms.
- Administer and sustain enterprise SIEM platforms and analytics across their lifecycle.
- Research advanced analytics, visualizations, exploits, and associated detections to develop actionable defensive solutions.
- Train cyber security analysts on the operation and usage of SIEM tools.
- Identify, report, and track SIEM outages and complex issues that cannot be resolved locally.
- Coordinate and collaborate directly with government stakeholders to integrate emerging capabilities.
- Deliver complex technical reports while demonstrating self-motivation and strong written and verbal communication. What You Bring (Basic Qualifications)

### Clearance & Location
- Active DoD Top Secret (TS) clearance, with the ability to obtain and maintain a TS/SCI; role is 100% on-site in Columbus, OH (must currently reside within a 2-hour commute or be willing to relocate).

### Required Certifications
- Current DoD 8570 IAT Level II or higher (e.g., Security+ CE, SSCP, GSEC, or 8140 equivalent), plus the ability to obtain a DoD 8570 CSSP-Analyst certification (e.g., CEH, CySA+, GCIA) within 180 days of hire.

### Education & Experience
- Bachelor's degree in a related discipline with 8+ years of applicable experience (additional related experience accepted in lieu of degree).

### SIEM & Incident Defense
- Deep architectural, engineering, and operational expertise with enterprise SIEM platforms (e.g., Elastic/Kibana, MDE/Sentinel, Tines, Darktrace), paired with hands-on CND (Protect, Detect, Respond, Sustain) experience in a computer incident response environment.

### Threat, Network & Telemetry Analysis
- Strong grasp of threat lifecycles, attack vectors, and adversary TTPs, backed by advanced networking knowledge (TCP/IP, ports/protocols, traffic flow, OSI model, defense-in-depth) and demonstrated experience analyzing high-volume logs, Netflow, Full Packet Capture, and attack artifacts.

### Professional Execution & Adaptability
- Proven ability to work independently, engage in technical self-study, collaborate across cross-functional teams to solve complex problems, and adjust work hours/schedules as mission needs dictate. Additional Desired Skills (Preferred Qualifications)

### Advanced Certifications
- Current DoD 8570 CSSP-Analyst certifications (e.g., CEH, CySA+) and/or advanced vendor certifications in operating, maintaining, or administering enterprise SIEM platforms (e.g., Splunk, Elastic/Kibana, MDE/Sentinel).

### DoD & Mission Experience
- Prior background supporting DISA and DoD networks, with demonstrated experience identifying and countering Advanced Persistent Threats (APTs) and emergent cyber threats.

### SIEM Engineering & Analytics
- Experience engineering and sustaining production-grade SIEM environments, developing extended cyber analytics, and applying Detection-as-Code principles.

### Systems Administration & Development
- Linux- and Windows-based systems administration in virtualized or cloud environments, hands-on Unix/Linux CLI navigation, scripting/programming skills, and API development and integration.

### Threat Intelligence & Reporting
- Strong working knowledge of Intelligence-Driven Defense, the Cyber Kill Chain methodology, malware analysis concepts/methods, and authoring complex technical reports detailing analytic findings.

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.

### Original Posting

October 15, 2026 For U.S.

### Positions

While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

### Pay Range

Pay Range $107,900.00 - $195,050.00 The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

## At a glance
- Posted by the employer: Nov 5, 2026
- First seen by OpenNash: Oct 25, 2026
- Last checked: Nov 8, 2026
- Listed for: 14 days
- Location: Shiloh, IL
- Pay: $107,900.00 - $195,050.00[Apply on Leidos’s careers site →](https://leidos.wd5.myworkdayjobs.com/External/job/Shiloh-IL/Security-Information---Event-Management--SIEM--SME_R-00194726)

## Hiring at Leidos
- Open jobs: 2,265
- New in the last 7 days: After two weekly collections
- Tracked since: Jul 10, 2026

[All Leidos jobs](https://jobs.opennash.com/companies/leidos/) · [Weekly hiring report](/reports/hiring/)

## More jobs at Leidos

### [Security Operations Center (SOC) Analyst](https://jobs.opennash.com/companies/leidos/jobs/b4429a41d7ad8f98fcb0/)

Shiloh, IL

### [Senior Network Software Engineer](https://jobs.opennash.com/companies/leidos/jobs/48e0831c6780fd12973c/)

Shiloh, IL

### [Security Manager](https://jobs.opennash.com/companies/leidos/jobs/b3877abd7a9ed54464e9/)

Beavercreek, OH

### [Security Training Instructor, Airport Screening Operations](https://jobs.opennash.com/companies/leidos/jobs/94a337a3c7815d8ecda0/)

Rochester, NY

### [Senior AWS Cyber Engineer](https://jobs.opennash.com/companies/leidos/jobs/31bdcf320ea1091c4419/)

Bedford, MA

## Similar jobs at other companies

### [Marketing Event Coordinator](https://jobs.opennash.com/companies/fastenal/jobs/fbb7ea59b0b505b8e8a5/)

Fastenal · Winona, MN

### [Event Producer, Event Productions, Event Productions](https://jobs.opennash.com/companies/amazon/jobs/3b76636adf1833f55b26/)

Amazon · US, WA, Seattle

### [Event Producer, AMER Event Productions, Event Productions](https://jobs.opennash.com/companies/amazon/jobs/8d14c35ee6b7b27f2005/)

Amazon · US, NY, New York

### [Assembler - (HIRING EVENT)](https://jobs.opennash.com/companies/eaton/jobs/8769cc4ff2cdd94ee547/)

Eaton · Richmond, Virginia, USA

### [Turnaround Event Manager](https://jobs.opennash.com/companies/nutrien/jobs/b2ff1bb56f2bb45c4bf4/)

Nutrien · Borger, TX, USA

OpenNash lists jobs from employers’ own careers sites and does not handle applications.
Dates come from the employer where stated; “first seen” and “last checked” are our own observations.

[ OpenNash ](https://opennash.com/)

AI-native services firm that builds custom software and 24/7 AI agents.

OpenNash Jobs is an OpenNash Applied AI project.
[Book time with OpenNash](https://calendly.com/opennash/new-meeting?hide_gdpr_banner=1)

Jobs
- [Search jobs](https://jobs.opennash.com/search/)
- [Companies](https://jobs.opennash.com/explore/)
- [Hiring report](https://jobs.opennash.com/reports/hiring/)
- [AI assistants](https://jobs.opennash.com/connect/)
- [How it works](https://jobs.opennash.com/methodology/)

OpenNash
- [opennash.com](https://opennash.com/)
- [Services](https://opennash.com/ai-agent-consulting/)
- [OpenNash CX](https://opennash.com/cx/)
- [AI Tools](https://opennash.com/ai-tools/)
- [Blog](https://opennash.com/blog/)
- [About](https://opennash.com/about/)

Contact
- [hello@opennash.com](mailto:hello@opennash.com)

- [LinkedIn](https://www.linkedin.com/company/opennash)

- [Support](https://jobs.opennash.com/support/)

- [Privacy](https://jobs.opennash.com/privacy/)

- [Terms](https://jobs.opennash.com/terms/)

© 2026 OpenNash, Inc. Company names and public job postings belong to their respective owners. Employers control source availability and application decisions.