Detection Engineer Analyst

RMC - Resource Management Concepts Inc.; Quantico (VA); Presencial; USD 120.000 - 140.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Relocation assistance

Paid vacation and federal holidays

Healthcare plans

401K plan

Descripción de la vacante

Resource Management Concepts, Inc. (RMC) seeks a Detection Engineer Analyst to support an active government contract in Quantico, VA, delivering defensive cyberspace operations and CSSP functions to protect IT services.

The role includes developing detection use cases based on MITRE ATT&CK, tuning detections, and maintaining low false positives while reviewing SIEM/SOAR data. A DoD clearance and relevant certifications are required.

Formación

• Active TS/SCI eligibility required.
• Bachelor’s degree in a technical or managerial discipline with 5+ years in Cybersecurity/IT/Defensive Cyberspace Operations OR an equivalent.
• HS Diploma or equivalency with 7 years of relevant experience.
• DoD 8570 IAT Level III certification is required.
• DoD 8570 CSSP Analyst certification is required.
• Experience writing signatures for network/host IDS/IPS (e.g., KQL/Snort/ePO/Yara).

Responsabilidades

• Develop detection use cases based on MITRE ATT&CK and current threats.
• Review incident reports to tune related detection use cases.
• Review SIEM/SOAR queues and implement corrective actions.
• Identify gaps in logging and detection across attack surface.
• Assist in implementing new log ingestion and verify parsing/normalization in SIEM/SOAR.
• Create high fidelity correlation rules, signatures, filters, and automations with low false positives.

Conocimientos

Active TS/SCI clearance

5+ years cyber/IT experience

Signature development (KQL/Snort/ePO/Y

Educación

College degree in technical/managerial discipline

HS Diploma with 7 years experience

Herramientas

DoD 8570 IAT Level III certification

DoD 8570 CSSP Analyst certification

Descripción del empleo

Position Title: Detection Engineer Analyst

Location: Quantico, Virginia, United States

Department: Information Technology

Work Type: Full time

Workplace Type: On-site

Description

Resource Management Concepts, Inc. (RMC) provides high-quality, professional services to government and commercial sectors. Our mission is to deliver exceptional management and technology solutions supporting the protection and preservation of the people and environment of the United States of America.

RMC is hiring a Detection Engineer Analyst to support an active government contract in Quantico, Virginia, providing defensive cyberspace operations and Cyber Security Service Provider (CSSP) functions. This position will support the government's mission to deny, disrupt, and degrade adversaries' abilities and attempts to disrupt, exploit and attack the information technology (IT) services provided to network users.

The selected applicant will perform a variety of activities including but not limited to:

• Develop detection use cases based on current threats, the MITRE ATT&CK framework, and government direction.
• Review incident reporting to tune related detection use cases as necessary.
• Review Security information and event management (SIEM)/ Security orchestration, automation, and response (SOAR) incident queue for unnecessary events and alerts and implement corrective actions.
• Identify gaps in logging and detection capabilities across attack surface.
• Assist in implementing new log ingestion and verify proper parsing and normalization of data in SIEM/SOAR.
• Create high fidelity correlation rules, signatures, filters, and automations and maintain low false-positive rate.

Requirements

Required

• Active TS/SCI (DoD TOP SECRET clearance with Sensitive Compartmented Information access) eligibility is required. Applicant selected can begin supporting this position with an Active DoD SECRET clearance. Applicant selected will be subject to security investigation(s) and must maintain eligibility requirements for access to classified information.
• College degree in a technical or managerial related discipline AND Five (5) years of practical experience in a Cybersecurity, Engineering, Information Technology, and/or Defensive Cyberspace Operations; OR
• H.S. Diploma or equivalency certificate AND Seven (7) years of practical experience in the same.
• DoD 8570 IAT Level III certification.
• DoD 8570 CSSP Analyst certification.
• Experience writing signatures (e.g., KQL/Snort/ePO/Yara) for network and host IDS/IPS.

Desired

• Microsoft Cloud Security training is highly recommended.
• Microsoft Azure and Microsoft Defender XDR.
• Microsoft Sentinel Ninja Training.
• Microsoft Defender For Endpoint Ninja Training.
• Microsoft Defender For Identity Ninja Training.
• Microsoft SC-XXX Training (certifications).

Schedule: M-F, 5 X 8, between 7:00am EST and 5:00pm EST, normally not to exceed 40 hours per week.

This position may require extended or non-standard hours occasionally to support major cyber incidents. This position is considered essential and may be required to report during hazardous weather, power outages, fuel shortages, pandemics, and other emergencies.

Benefits

• At RMC, we're committed to your career growth! RMC differentiates itself from other firms through its investment in our employees. We invest our resources to train, certify, educate, and build our employees.
• RMC can offer you a great place to work with a small company feel and give you the experience, tuition assistance, and certifications that will take your career to the next level.
• Monday to Friday full-time day shift work, and can assist in paid relocation.
• This also includes a competitive paid vacation package with 11 paid federal holidays.
• Additionally, we also offer high-quality, low-deductible healthcare plans, pet insurance, and a competitive 401K package.
• Salary at RMC is determined by various factors, including but not limited to location, a candidate's specific combination of education, knowledge, skills, competencies, and experience, as well as contract-specific requirements. The current salary range for this position will be $120,000 to $140,000 (annually).