Apply on Employer Site

Acuative · 1 day ago

Information Security Engineer

Strongsville, OH

Full-time

Onsite

Mid Level

3+ years exp

Acuative is a global IT solutions provider committed to delivering top-tier network managed services and solutions. The SIEM Engineer is responsible for designing, implementing, tuning, and maintaining Security Information and Event Management (SIEM) systems across regulated and commercial client environments.

Information Technology

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Design and deploy SIEM instances (e.g., LogRhythm for regulated, Elastic Stack for commercial clients) across cloud and on-premise environments

Build scalable log ingestion pipelines leveraging FIPS 140-3 validated cryptographic modules when required

Engineer multi-tenant configurations with strict client isolation controls

Onboard log sources from firewalls, servers, endpoints, and SaaS platforms

Normalize and parse logs to ensure consistency, searchability, and structured alerting

Maintain and document the log source catalog and retention policies

Collaborate with analysts and threat intelligence teams to build and optimize detection rules

Tune alert thresholds to minimize false positives while maintaining sensitivity

Conduct rule audits and implement playbook-driven updates

Integrate SIEM with SOAR platforms for automated incident response

Develop or enhance detection and response workflows using scripting or playbook engine

Benchmark performance and optimize query performance

Qualification

SIEM engineeringLogRhythmElastic StackSplunkScriptingRegulatory frameworksPythonPowerShellRegexLog formatsSOAR platformsMulti-tenant environmentCertifications