Security Monitoring / SIEM Analyst

Overview DecisionPoint seeks a Security Monitoring / SIEM Analyst to support enterprise cybersecurity operations within a federal and DoD-aligned mission environment. This role provides continuous monitoring of security events, log analysis, threat detection, and incident escalation in order to protect mission-critical systems. The analyst will review SIEM alerts, correlate data across multiple log sources, assess anomalous behavior, and support the investigative process for potential threats. The Security Monitoring / SIEM Analyst plays a critical role in maintaining situational awareness, enhancing detection capabilities, and strengthening cyber defense through proactive log analysis and coordination with incident response and engineering teams. This position is fully remote. Duties & Responsibilities The Security Monitoring / SIEM Analyst will: Monitor SIEM dashboards and event queues for suspicious or anomalous cybersecurity activity. Correlate logs from multiple security data sources, including firewalls, endpoints, cloud services, and authentication platforms. Investigate events and alerts to determine severity, threat likelihood, and required escalation paths. Support information gathering and preliminary triage for cybersecurity incidents. Analyze user activity, authentication logs, and system behavior for potential compromise indicators. Assist with tuning SIEM rules, correlation logic, thresholds, and suppression patterns to improve detection accuracy. Document