Cyber SIEM Engineer & Content Developer - TS/SCI Clearance

IPSecure, Inc.; San Antonio (TX); On-site; USD 110,000 - 160,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

Vacation time

Sick leave

Education reimbursement

401(k) match

Legal plan

ID protection

Accident insurance

Critical illness

Hospital indemnity

Job summary

IPSecure, Inc. in San Antonio, TX is seeking a Cyber Content Developer/SIEM Engineer (TS/SCI required) to implement use cases for analysts and maintain SIEM content. You will build detections, dashboards, and automated reporting in coordination with DoD leadership.

Responsibilities include analyzing DCO events, developing rules, tuning alerts, and maintaining SIEM resources while ensuring acceptable false positives and secure operations at JBSA Lackland.

Qualifications

• Active TS/SCI clearance required.
• BS in Computer Science or MS in CS/Cyber Security or GMLE certification within 120 days of hire.

Responsibilities

• Analyze DCO events and implement SIEM use cases.
• Create and tune detections, filters, and rules.
• Develop dashboards and visualizations to identify adversarial activity.
• Automate tasks and generate scheduled/adhoc SIEM reports.
• Maintain SIEM content across rule sets, lists, trends and reports.

Skills

Python

PowerShell

SIEM engineering

Log analysis

Threat detection

Education

Bachelor's degree in Computer Science

Master's degree in Computer Science/Cyber Security

Tools

Arcsight

Splunk

Devo

ELK

Phantom

Demisto

Job description

IPSecure, Inc. in San Antonio, TX is seeking a Cyber Content Developer/SIEM Engineer (TS/SCI required) to implement use cases for analysts and maintain SIEM content. You will build detections, dashboards, and automated reporting in coordination with DoD leadership.

Responsibilities include analyzing DCO events, developing rules, tuning alerts, and maintaining SIEM resources while ensuring acceptable false positives and secure operations at JBSA Lackland.