Detection Engineer

Sentar; Virginia; On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical, Dental, Vision

401(k) match

PTO and holidays

Employee ownership

Job summary

Sentar in Quantico, VA is seeking a Detection Engineer to support our government-facing cybersecurity missions, providing defensive cyberspace operations and CSSP functions. You will develop detection use cases based on MITRE ATT&CK, tune SIEM/SOAR alerts, identify gaps, and implement new logging and correlations while maintaining a low false-positive rate.

Eligible candidates hold Secret clearance with TS/SCI eligibility.

Qualifications

• Clearance: Secret to start; TS/SCI eligibility required.
• Education: High School Diploma or equivalency; Bachelor’s degree with 5 years or HS with 7 years in Cybersecurity/Engineering/IT/Defensive Cyberspace Operations.
• DoD 8570 CSSP Analyst certification.
• Experience: 5 years in Cybersecurity/Engineering/IT/DCO OR 7 years with HS.
• Desired: Microsoft Cloud Security training; Microsoft Azure and Defender XDR; Microsoft Sentinel Ninja Training; Defender for Endpoint Ninja Training; Defender for Identity Ninja Training; SC-XXX Training.

Responsibilities

• Develop detection use cases based on current threats, MITRE ATT&CK, and government direction.
• Review incident reporting to tune related detection use cases as necessary.
• Review SIEM/SOAR incident queue for unnecessary events and alerts and implement corrective actions.
• Identify gaps in logging and detection capabilities across attack surface.
• Assist in implementing new log ingestion and verify proper parsing and normalization of data in SIEM/SOAR.
• Create high fidelity correlation rules, signatures, filters, and automations and maintain low false-positive rate.

Skills

Threat detection

MITRE ATT&CK

SIEM/SOAR tuning

Education

Bachelor or higher preferred in technical/managerial field

High School Diploma or equivalency

Tools

SIEM/SOAR tooling

Job description

Sentar is proud to be an employee-owned company, fostering a culture of empowerment, collaboration, and innovation. Sentar is dedicated to developing the critical talent that the connected world demands to create solutions to address the convergence of cybersecurity, intelligence, analytics, and systems engineering. We invite you to join the team where you can build, innovate, and secure your career.

Sentar is seeking a Detection Engineer in Quantico, VA!

Role Description:

Sentar is hiring a Detection Engineer to support our customer in Quantico, VA, providing defensive cyberspace operations and Cyber Security Service Provider (CSSP) functions. This position will support the government's mission to deny, disrupt, and degrade adversaries’ abilities and attempts to disrupt, exploit and attack the information technology (IT) services provided to network users.

Responsibilities:

• Develop detection use cases based on current threats, the MITRE ATT&CK framework, and government direction.
• Review incident reporting to tune related detection use cases as necessary.
• Review Security information and event management (SIEM)/ Security orchestration, automation, and response (SOAR) incident queue for unnecessary events and alerts and implement corrective actions.
• Identify gaps in logging and detection capabilities across attack surface.
• Assist in implementing new log ingestion and verify proper parsing and normalization of data in SIEM/SOAR.
• Create high fidelity correlation rules, signatures, filters, and automations and maintain low false-positive rate.

Qualifications:

Clearance Level: Secret to start. TS/SCI eligibility is required.

Education: High School Diploma or equivalency certificate

Certifications:

• DoD 8570 CSSP Analyst certification.

Experience:

• Bachelor's degree in a technical or managerial related discipline AND Five (5) years of practical experience in Cybersecurity, Engineering, Information Technology, and/or Defensive Cyberspace Operations;
• High Diploma or equivalency certificate AND Seven (7) years of practical experience in Cybersecurity, Engineering, Information Technology, and/or Defensive Cyberspace Operations.

Desired:

• Microsoft Cloud Security training is highly recommended.
• Microsoft Azure and Microsoft Defender XDR.
• Microsoft Sentinel Ninja Training.
• Microsoft Defender For Endpoint Ninja Training.
• Microsoft Defender For Identity Ninja Training.
• Microsoft SC-XXX Training (certifications)

Benefits at Sentar:

Our unique employee ownership model attracts top talent, giving employees the freedom to take initiative and drive meaningful improvements. In addition to cultivating a thriving and inclusive work environment, Sentar offers an extensive benefits package designed to support the well-being of employees and their families. Employee ownership is the foundation of our culture, promoting participation, teamwork, and accountability while ensuring long-term financial security and a commitment to excellence.

• Voluntary Medical, Dental, Vision, with Flexible Spending Plan options
• Voluntary Life, Critical Illness, Accident, and Long Term Care insurance options
• Group Term Life, Short-Term and Long-Term Disability is provided by Sentar to all qualifying employees
• Generous 401(k) match
• Competitive PTO plan that graduates quickly with years of service
• Other leave programs; holiday schedule along with bereavement, maternity, jury and military duty

Sentar is an affirmative Action and Equal Opportunity Employer M/F/Vets/Persons with Disabilities

We want you to build your career at Sentar, so if you are an individual with a disability and require a reasonable workplace accommodation applying for a job or at any point in the employment process, contact the Recruiting Manager at [e-mail] . Please indicate the specifics of the assistance needed. Thank you for considering Sentar in your employment search.

Build, Innovate, Secure Your Career at Sentar.