Detection Engineer: MITRE-Driven Cyber Defense (Quantico)

Sentar; Virginia; On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical, Dental, Vision

401(k) match

PTO and holidays

Employee ownership

Job summary

Sentar in Quantico, VA is seeking a Detection Engineer to support our government-facing cybersecurity missions, providing defensive cyberspace operations and CSSP functions. You will develop detection use cases based on MITRE ATT&CK, tune SIEM/SOAR alerts, identify gaps, and implement new logging and correlations while maintaining a low false-positive rate.

Eligible candidates hold Secret clearance with TS/SCI eligibility.

Qualifications

• Clearance: Secret to start; TS/SCI eligibility required.
• Education: High School Diploma or equivalency; Bachelor’s degree with 5 years or HS with 7 years in Cybersecurity/Engineering/IT/Defensive Cyberspace Operations.
• DoD 8570 CSSP Analyst certification.
• Experience: 5 years in Cybersecurity/Engineering/IT/DCO OR 7 years with HS.
• Desired: Microsoft Cloud Security training; Microsoft Azure and Defender XDR; Microsoft Sentinel Ninja Training; Defender for Endpoint Ninja Training; Defender for Identity Ninja Training; SC-XXX Training.

Responsibilities

• Develop detection use cases based on current threats, MITRE ATT&CK, and government direction.
• Review incident reporting to tune related detection use cases as necessary.
• Review SIEM/SOAR incident queue for unnecessary events and alerts and implement corrective actions.
• Identify gaps in logging and detection capabilities across attack surface.
• Assist in implementing new log ingestion and verify proper parsing and normalization of data in SIEM/SOAR.
• Create high fidelity correlation rules, signatures, filters, and automations and maintain low false-positive rate.

Skills

Threat detection

MITRE ATT&CK

SIEM/SOAR tuning

Education

Bachelor or higher preferred in technical/managerial field

High School Diploma or equivalency

Tools

SIEM/SOAR tooling

Job description

Sentar in Quantico, VA is seeking a Detection Engineer to support our government-facing cybersecurity missions, providing defensive cyberspace operations and CSSP functions. You will develop detection use cases based on MITRE ATT&CK, tune SIEM/SOAR alerts, identify gaps, and implement new logging and correlations while maintaining a low false-positive rate.

Eligible candidates hold Secret clearance with TS/SCI eligibility.