Cyber SIEM Engineer & Content Developer (TS/SCI)

IPSecure; Chicago (IL); On-site; USD 110,000 - 170,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

Paid Time Off

Education Reimbursement

401(k) with match

Legal Plan

ID Protection

Accident Insurance

Critical Illness Insurance

Hospital Indemnity Insurance

Job summary

IPSecure is seeking a Cyber Content Developer/SIEM Engineer to implement use cases and provide analysts with a streamlined SIEM view of incidents. The role collaborates with DO/DM leadership to align tasks with squadron requirements and future initiatives.

Responsibilities include creating detections, dashboards, and content for SIEM, analyzing log data, and ensuring acceptable false-positive rates. TS/SCI clearance is mandatory, with DoD-aligned experience preferred.

Qualifications

• Active TS/SCI clearance required.
• GIAC GMLE certification within 120 days or BS/MS in CS/Cyber Security.
• 2+ years SIEM technology experience preferred.
• Extensive knowledge of MITRE ATT&CK framework is a plus.

Responsibilities

• Analyze DCO events.
• Create detections by analyzing log data across the enterprise.
• Develop dashboards and visualizations to identify adversarial activity.
• Tune SIEM event correlation rules to reduce false positives.
• Automate SIEM tasks using a scripting language.
• Create and maintain SIEM documentation.

Skills

SIEM Experience

DCO Analysis

Python

PowerShell

Log Analysis

Education

GMLE Certification

BS in Computer Science

MS in Cyber Security

Tools

Arcsight

Splunk

Devo

ELK

SOAR (Phantom/Demisto)

Job description

IPSecure is seeking a Cyber Content Developer/SIEM Engineer to implement use cases and provide analysts with a streamlined SIEM view of incidents. The role collaborates with DO/DM leadership to align tasks with squadron requirements and future initiatives.

Responsibilities include creating detections, dashboards, and content for SIEM, analyzing log data, and ensuring acceptable false-positive rates. TS/SCI clearance is mandatory, with DoD-aligned experience preferred.