Cybersecurity Detection Engineer — SIEM & Threat Analytics

Sarela Technology Solutions; Columbus (OH); On-site; USD 110,000 - 150,000; Full time

Job summary

Sarela Technology Solutions seeks a Cybersecurity Engineer to support the DLA CSSP, designing advanced threat detection use cases, building SIEM content, and enhancing monitoring across DoD enterprise environments.

Ideal candidates have active DoD Top Secret clearance, 5+ years in IT, 3+ years with SIEM content development, and experience with Splunk, SPL, KQL, and automation using PowerShell or Python.

Qualifications

• Active DoD Top Secret security clearance or equivalent
• Minimum five (5) years of IT experience
• Minimum three (3) years of SIEM content development or Threat Detection
• Minimum three (3) years as System/Network Administrator
• Experience with SIEM correlation rules and analytics
• Strong understanding of enterprise network architecture and log analysis
• Experience automating security tasks with PowerShell or Python

Responsibilities

• Research, develop, and implement new cybersecurity threat detection use cases
• Design, develop, and maintain SIEM content, analytics, dashboards, and detection content
• Develop automation scripts to enhance SIEM functionality
• Analyze log sources to improve visibility and data quality
• Collaborate with stakeholders to tailor detection signatures
• Evaluate architectures and telemetry to improve detection capabilities
• Support MITRE ATT&CK-based detection methodologies
• Prepare technical documentation and engineering recommendations

Skills

Threat detection engineering

Communication skills

Security operations collaboration

Problem solving

Education

Bachelor's degree in Cybersecurity/IT/CS/CE

DoD 8570 IAT Level II equivalent

Tools

Splunk

PowerShell

Python

KQL

SPL

Job description

Sarela Technology Solutions seeks a Cybersecurity Engineer to support the DLA CSSP, designing advanced threat detection use cases, building SIEM content, and enhancing monitoring across DoD enterprise environments.

Ideal candidates have active DoD Top Secret clearance, 5+ years in IT, 3+ years with SIEM content development, and experience with Splunk, SPL, KQL, and automation using PowerShell or Python.