Defense Detection Engineer - SIEM/SOAR & MITRE Expert

Sentar Inc.; Quantico (VA); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

Health benefits

401(k) match

Paid time off

Tuition reimbursement

Professional development

Job summary

Sentar is seeking a Detection Engineer in Quantico, VA to support defensive cyberspace operations for a government mission. The role requires strong experience with detection use cases, MITRE ATT&CK, and SIEM/SOAR environments.

Ideal candidates will hold a Secret clearance, DoD 8570 IAT Level III and CSSP Analyst certifications, with 5–7 years of cybersecurity/defense experience and education in a technical or managerial field. Sentar offers owner-employee advantages and comprehensive benefits.

Qualifications

• Bachelor's degree in a technical or managerial related discipline with five (5) years of practical experience in Cybersecurity, Engineering, Information Technology, and/or Defensive Cyberspace Operations; OR High Diploma or equivalency certificate with seven (7) years of practical experience in Cybersecurity, Engineering, Information Technology, and/or Defensive Cyberspace Operations.
• Clearance Level: Secret to start. TS/SCI eligibility is required.
• DoD 8570 IAT Level III certification; DoD 8570 CSSP Analyst certification.

Responsibilities

• Develop detection use cases based on current threats, the MITRE ATT&CK framework, and government direction.
• Review incident reporting to tune related detection use cases as necessary.
• Review SIEM/SOAR incident queue for unnecessary events and alerts and implement corrective actions.
• Identify gaps in logging and detection capabilities across attack surface.
• Assist in implementing new log ingestion and verify proper parsing and normalization of data in SIEM/SOAR.
• Create high fidelity correlation rules, signatures, filters, and automations and maintain low false-positive rate.

Education

High School Diploma or equivalency certificate

Job description

Sentar is seeking a Detection Engineer in Quantico, VA to support defensive cyberspace operations for a government mission. The role requires strong experience with detection use cases, MITRE ATT&CK, and SIEM/SOAR environments.

Ideal candidates will hold a Secret clearance, DoD 8570 IAT Level III and CSSP Analyst certifications, with 5–7 years of cybersecurity/defense experience and education in a technical or managerial field. Sentar offers owner-employee advantages and comprehensive benefits.