Advanced SIEM Content Developer – Threat Detection

Agecareers; Columbus (OH); On-site; USD 115,000 - 135,000; Full time

Benefits offered by this job

26 Days Paid Leave

Performance Bonuses

401(k) with Match

Health Benefits

Parental Leave

Military Differential Pay

Tuition reimbursement

Job summary

AGE Solutions is seeking an experienced SIEM Content Developer to support development and enhancement of cybersecurity threat detection capabilities. This role researches threats and threat intelligence to develop new detection use cases and develops custom scripts to enhance SIEM functionality.

The SIEM Content Developer collaborates with stakeholders and Threat Detection Analysts to improve data feeds, establish alerting priorities, and create signatures for critical systems and applications.

Qualifications

• Five years of IT experience.
• Three years with a SIEM in content development or IR.
• Three years of system and/or network administration.

Responsibilities

• Research and develop new threat detection use cases.
• Collaborate with stakeholders and SMEs to identify gaps in security protection and analytics.
• Develop custom scripts to enhance SIEM functionality and threat detection capabilities.
• Review SIEM data feeds and recommend improvements.
• Create detection signatures tailored to programs and applications.
• Develop and maintain scripts in PowerShell, Python, or SPL.
• Apply MITRE ATT&CK framework and defense-in-depth knowledge to detections.

Skills

SIEM

Threat detection

Scripting

Threat intelligence

Network security

Tools

PowerShell

Python

SPL

Job description

AGE Solutions is seeking an experienced SIEM Content Developer to support development and enhancement of cybersecurity threat detection capabilities. This role researches threats and threat intelligence to develop new detection use cases and develops custom scripts to enhance SIEM functionality.

The SIEM Content Developer collaborates with stakeholders and Threat Detection Analysts to improve data feeds, establish alerting priorities, and create signatures for critical systems and applications.