Detection Engineer

Sentar-; Quantico (VA); On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Flexible Spending Plan

Life insurance

Critical illness coverage

Disability insurance

401(k) match

Paid time off

Leave programs

Job summary

Sentar is seeking a Detection Engineer in Quantico, VA to support defensive cyberspace operations and CSSP functions for our government customer. The role focuses on developing detection use cases, tuning SIEM/SOAR alerts, and improving logging and correlation rules to minimize false positives.

Qualified candidates will hold a Secret clearance to start with TS/SCI eligibility, and have a DoD 8570 CSSP Analyst certification, plus a relevant technical degree and multiple years of cybersecurity

Qualifications

• Bachelor's degree in a technical or managerial related discipline AND five (5) years of practical experience in Cybersecurity, Engineering, Information Technology, and/or Defensive Cyberspace Operations.
• High Diploma or equivalency certificate AND seven (7) years of practical experience in Cybersecurity, Engineering, Information Technology, and/or Defensive Cyberspace Operations.
• DoD 8570 CSSP Analyst certification is required.

Responsibilities

• Develop detection use cases based on current threats, the MITRE ATT&CK framework, and government direction.
• Review incident reporting to tune related detection use cases as necessary.
• Review SIEM/SOAR incident queue for unnecessary events and alerts and implement corrective actions.
• Identify gaps in logging and detection capabilities across attack surface.
• Assist in implementing new log ingestion and verify proper parsing and normalization of data in SIEM/SOAR.
• Create high fidelity correlation rules, signatures, filters, and automations and maintain low false-positive rate.

Education

High School Diploma or equivalency certificate

Bachelor's degree in a technical or managerial related discipline

DoD 8570 CSSP Analyst certification

Job description

Sentar is proud to be an employee-owned company, fostering a culture of empowerment, collaboration, and innovation. Sentar is dedicated to developing the critical talent that the connected world demands to create solutions to address the convergence of cybersecurity, intelligence, analytics, and systems engineering. We invite you to join the team where you can build, innovate, and secure your career.

Sentar is seeking a Detection Engineer in Quantico, VA!

Role Description:

Sentar is hiring a Detection Engineer to support our customer in Quantico, VA, providing defensive cyberspace operations and Cyber Security Service Provider (CSSP) functions. This position will support the government's mission to deny, disrupt, and degrade adversaries’ abilities and attempts to disrupt, exploit and attack the information technology (IT) services provided to network users.

Responsibilities:

• Develop detection use cases based on current threats, the MITRE ATT&CK framework, and government direction.
• Review incident reporting to tune related detection use cases as necessary.
• Review Security information and event management (SIEM)/ Security orchestration, automation, and response (SOAR) incident queue for unnecessary events and alerts and implement corrective actions.
• Identify gaps in logging and detection capabilities across attack surface.
• Assist in implementing new log ingestion and verify proper parsing and normalization of data in SIEM/SOAR.
• Create high fidelity correlation rules, signatures, filters, and automations and maintain low false-positive rate.

Qualifications:

Clearance Level: Secret to start. TS/SCI eligibility is required.

Education: High School Diploma or equivalency certificate

Certifications:

• DoD 8570 CSSP Analyst certification.

Experience:

• Bachelor's degree in a technical or managerial related discipline AND Five (5) years of practical experience in Cybersecurity, Engineering, Information Technology, and/or Defensive Cyberspace Operations;
• High Diploma or equivalency certificate AND Seven (7) years of practical experience in Cybersecurity, Engineering, Information Technology, and/or Defensive Cyberspace Operations.

Desired:

• Microsoft Cloud Security training is highly recommended.
• Microsoft Azure and Microsoft Defender XDR.
• Microsoft Sentinel Ninja Training.
• Microsoft Defender For Endpoint Ninja Training.
• Microsoft Defender For Identity Ninja Training.
• Microsoft SC-XXX Training (certifications)

Benefits at Sentar:

Our unique employee ownership model attracts top talent, giving employees the freedom to take initiative and drive meaningful improvements. In addition to cultivating a thriving and inclusive work environment, Sentar offers an extensive benefits package designed to support the well-being of employees and their families. Employee ownership is the foundation of our culture, promoting participation, teamwork, and accountability while ensuring long-term financial security and a commitment to excellence.

• Voluntary Medical, Dental, Vision, with Flexible Spending Plan options
• Voluntary Life, Critical Illness, Accident, and Long Term Care insurance options
• Group Term Life, Short-Term and Long-Term Disability is provided by Sentar to all qualifying employees
• Generous 401(k) match
• Competitive PTO plan that graduates quickly with years of service
• Other leave programs; holiday schedule along with bereavement, maternity, jury and military duty

Sentar is an affirmative Action and Equal Opportunity Employer M/F/Vets/Persons with Disabilities

We want you to build your career at Sentar, so if you are an individual with a disability and require a reasonable workplace accommodation applying for a job or at any point in the employment process, contact the Recruiting Manager at [e-mail] . Please indicate the specifics of the assistance needed. Thank you for considering Sentar in your employment search.

Build, Innovate, Secure Your Career at Sentar.