Enterprise Logging Solution Engineer

Start Your Adventure at Via Logic

Location: Primarily onsite at a government site in Ashburn, VA. Specific worksite expectations will be confirmed for the assignment.
Type: Full-time, W-2
Compensation: $112,000–$159,000 annually, depending on experience, qualifications, and assignment
Experience: Junior: 3+ years; Mid-Level: 3+ years; Senior: 5+ years of relevant experience

Anticipated annual salary ranges by level are:

• Junior: $112,000–$125,000
• Mid-Level: $120,000–$148,000
• Senior: $127,000–$159,000

Reliable security monitoring starts with reliable data. Join Via Logic supporting U.S. Customs and Border Protection cybersecurity operations, where you’ll help keep enterprise logging systems collecting, processing, and delivering the information security teams need to protect critical systems and networks.

As an ELS Engineer, you’ll maintain log collection infrastructure, configure log sources, monitor logging system health and performance, and help develop and test log parsers and correlation rules. You’ll also support troubleshooting, system onboarding, dashboards, and improvements that make security data useful to analysts, system owners, and government stakeholders.

We are hiring for multiple openings across Junior, Mid-Level, and Senior experience levels through this posting. We’ll consider the depth and relevance of your experience, technical capabilities, and ability to work independently when identifying the opening that fits your background.

Eligibility & Clearance Requirements

Due to CBP requirements, applicants must:

• Be a U.S. citizen.
• Be able to obtain and maintain the required CBP BI - High Trust background investigation and suitability determination, including applicable credit history review, for access to government facilities and systems.
• Be available to work primarily onsite at a government site in Ashburn, VA. Specific worksite and travel expectations will be confirmed for the assignment.

Please include any current or prior federal suitability or background investigation status when applying. We’ll confirm the applicable access requirements for the specific opening.

Your Mission

Responsibilities will vary by experience level and assignment, with Junior engineers contributing under guidance and more experienced engineers taking greater ownership of technical work.

• Maintain enterprise log collection infrastructure and support the health, performance, and reliability of ELS and SIEM platforms.
• Configure, onboard, and maintain log sources so security teams can monitor systems, applications, networks, endpoints, and cloud environments.
• Troubleshoot log collection, processing, connectivity, and ingestion issues, including interruptions to existing data feeds.
• Develop, test, and maintain log parsers, correlation rules, signatures, and other security content.
• Support the collection and aggregation of data from sources such as firewalls, intrusion detection systems, endpoint tools, proxy servers, DLP platforms, cloud services, and vulnerability scanners.
• Create and maintain dashboards that support security monitoring, system oversight, and audit reporting.
• Support testing and implementation of approved logging enhancements in on-premises and cloud environments.
• Identify gaps in logging coverage, platform capabilities, and supporting processes, and recommend practical improvements.
• Support streaming data processing capabilities used for log onboarding, ingestion, and analysis.
• Extract and analyze relevant log information to support security investigations and operational requests.
• Maintain technical documentation, onboarding procedures, implementation plans, and support workflows.
• Collaborate with security analysts, system owners, engineers, and government stakeholders to resolve issues and support approved changes.

What You Bring to the Expedition

• Relevant professional experience in enterprise logging, SIEM administration, security engineering, systems administration, or related technical work.
• Experience configuring, maintaining, or troubleshooting log collection infrastructure, data sources, or security monitoring platforms.
• Understanding of how logs move from source systems through collection, processing, and ingestion into a centralized platform.
• Ability to investigate technical issues involving data feeds, connectivity, configuration, or platform performance.
• Familiarity with log parsing, search queries, correlation rules, dashboards, or similar capabilities used to interpret security data.
• Experience maintaining technical documentation and communicating implementation or troubleshooting steps clearly.
• Ability to collaborate with technical teams and explain findings, impacts, and recommended next steps.

We are considering candidates at three levels:

• Junior - 3+ years: You bring relevant technical experience and can contribute to log-source configuration, platform monitoring, routine troubleshooting, testing, and documentation with guidance from more experienced engineers. You can follow established procedures, document your work, and recognize when an issue needs escalation.
• Mid-Level - 3+ years: You bring demonstrated depth in enterprise logging or security monitoring and can independently carry out assigned log onboarding, configuration, troubleshooting, and platform improvement work. You can investigate ingestion issues, develop or refine parsers and correlation rules, and coordinate technical changes with other teams.
• Senior - 5+ years: You bring deeper experience supporting enterprise logging environments and can resolve complex collection, processing, ingestion, or platform issues. You can contribute to technical assessments and implementation plans, recommend improvements to reliability and logging coverage, and provide technical guidance to other engineers.

Junior and Mid-Level openings share a 3+ year experience threshold. The distinction is the depth of your hands-on experience, the complexity of work you’ve handled, and your ability to deliver independently.

Preferred qualifications:

• Hands-on experience administering or engineering enterprise SIEM and logging platforms.
• Experience developing log parsers, correlation rules, dashboards, or security monitoring content.
• Experience onboarding logs from cloud services, network devices, endpoints, applications, or security tools.
• Experience with scripting or automation to support logging operations and troubleshooting.
• Experience supporting streaming data pipelines, high availability, or multi-site logging environments.
• Experience implementing changes through established testing, configuration management, and change control processes.
• Experience supporting federal systems, security audits, or logging compliance requirements.

Tell us where you have the strongest experience and which areas you want to develop further.

Your Route Into Via Logic

One posting, three experience levels. Tell us about the logging platforms you’ve supported, the data sources you’ve worked with, and the onboarding, troubleshooting, or engineering improvements you’ve contributed to.

Why Explorers Stay

• Healthcare coverage and paid time off that give you room to take care of life outside work.
• Teammates who share knowledge, pitch in, and help each other grow.
• Opportunities to deepen your specialty and explore adjacent areas of cybersecurity as new assignments open up.
• Meaningful work protecting systems that support a federal mission.

How We Work

• These positions work primarily onsite at a government site in Ashburn, VA. Specific worksite and travel expectations will be confirmed for the assignment.
• You’ll collaborate with Via Logic teammates, government partners, security analysts, system owners, and other technical teams using tools approved for your work environment.
• The task’s weekday coverage window is generally 7:00 a.m.–7:00 p.m. Eastern Time. Individual schedules and any on-call or surge support expectations will be discussed before moving forward.
• When virtual meetings are part of the work, we expect active participation and use video when appropriate and permitted by the client environment.

---