Cyber Security Consultant

Piper Companies; McLean (VA); Remote; USD 100,000 - 150,000; Full time

Job summary

Piper Companies is seeking a Remote Cyber Security Consultant to assist with log migration and detection strategy for clients. The role requires extensive experience in deploying SIEM solutions and involves responsibilities such as optimizing log sources, creating correlation rules, and serving as a Subject Matter Expert. Candidates should possess strong skills in log management and automation, with relevant qualifications like CISSP or GIAC.

Benefits

Healthcare

Dental

Vision

PTO

Holiday

Qualifications

• 6+ years of experience in deploying and integrating SIEM solutions.
• Experience with Security Operation Centers tooling.
• Ability to create correlation and detection rules within a SIEM.

Responsibilities

• Collaborate to develop a log ingestion strategy.
• Document processes for ingesting high-quality log sources.
• Create high-quality correlation rules to enhance threat detection.

Skills

Log management

Detection strategy

Regular Expressions

Automation

Education

Relevant bachelor's degree

CISSP

GIAC

SIEM Vendor Qualification

Tools

Splunk

IBM QRadar

Job description

Piper Companies is seeking a Remote Cyber Security Consultant (SOAR) to join an international leader in cybersecurity services. The Consultant will play a pivotal role in assisting with log migration and detection strategy for clients.

Responsibilities of the Consultant include :

1. Collaborate with the technical lead to develop a log ingestion strategy.
2. Contribute to the detection strategy based on industry best practices.
3. Document a detailed step-by-step process for ingesting high-quality log sources.
4. Monitor and optimize log sources for maximum efficiency.
5. Create high-quality correlation rules to enhance threat detection.
6. Tune log sources and correlation rules for optimal performance.
7. Serve as a Subject Matter Expert (SME) for SIEM, correlation, and log source ingestion.
8. Identify opportunities for automation to improve analyst alert handling.
9. Work closely with internal and external teams to ensure product adoption.
10. Create technical documentation detailing SIEM aspects of the engagement.

Qualifications for the Consultant :

1. 6+ years of experience in deploying and integrating SIEM solutions in enterprise to large enterprise-level environments.
2. Experience with Security Operation Centers tooling and processes.
3. Experience in coordinating and conducting event collection, log management, event management, compliance automation, and identity monitoring activities using SIEM platforms.
4. Ability to create and develop correlation and detection rules within a SIEM to support alerting capabilities.
5. Experience with a variety of SIEM technologies such as Splunk, IBM QRadar, etc.
6. Proven ability to suggest detection strategies based on customer requirements.
7. Strong skills in Regular Expressions.
8. Ability to understand logs and locate / understand third-party documentation when necessary.
9. Familiarity with reports on the status of the SIEM, including metrics such as the number of logging sources, log collection rate, and other performance metrics.
10. Knowledge of Security Analysis & Response, including endpoint, network, and cloud-based environments, is a plus.
11. Relevant bachelor's degree or industry-recognized qualifications (CISSP, GIAC, SIEM Vendor Qualification, etc.).

Compensation for the Cyber Security Consultant :

• Salary Range: $, - $.
• Full benefits: Healthcare, Dental, Vision, PTO, Holiday.