Detection Engineer — Defensive Cyber Ops & SIEM

Sentar; Quantico (VA); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Voluntary Medical, Dental, Vision

401(k) match

Tuition reimbursement

Professional development reimbursement

Paid time off

Leave programs

Job summary

Sentar is seeking a Detection Engineer in Quantico, VA to support our government client in defensive cyberspace operations. The role focuses on building detection use cases grounded in MITRE ATT&CK, tuning alerts, and improving log ingestion and parsing across SIEM/SOAR environments.

Qualified candidates hold DoD 8570 IAT Level III and CSSP Analyst certifications, with Secret clearance to start and TS/SCI eligibility. The company highlights employee ownership and strong benefits.

Qualifications

• Bachelor's or higher in a technical/managerial discipline with 5+ years in Cybersecurity or related field.
• Alternative: high school diploma with 7+ years in Cybersecurity or related field.
• Clearance: Secret to start; TS/SCI eligibility.
• Certifications: DoD 8570 IAT Level III and CSSP Analyst.

Responsibilities

• Develop detection use cases based on threats and MITRE ATT&CK.
• Tune detection use cases by reviewing incident reporting.
• Review SIEM/SOAR queues and reduce unnecessary events.
• Identify logging/detection gaps and assist in log ingestion.
• Create high fidelity correlation rules and maintain low false positives.

Skills

MITRE ATT&CK

SIEM/SOAR

Threat detection

Defensive Cyberspace Operations

Education

Bachelor's degree in technical or managerial discipline

High School Diploma or equivalency

Tools

DoD 8570 IAT Level III

DoD 8570 CSSP Analyst

Job description

Sentar is seeking a Detection Engineer in Quantico, VA to support our government client in defensive cyberspace operations. The role focuses on building detection use cases grounded in MITRE ATT&CK, tuning alerts, and improving log ingestion and parsing across SIEM/SOAR environments.

Qualified candidates hold DoD 8570 IAT Level III and CSSP Analyst certifications, with Secret clearance to start and TS/SCI eligibility. The company highlights employee ownership and strong benefits.