MITRE-based Detection Engineer for Cyber Defense

Sentar-; Quantico (VA); On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Flexible Spending Plan

Life insurance

Critical illness coverage

Disability insurance

401(k) match

Paid time off

Leave programs

Job summary

Sentar is seeking a Detection Engineer in Quantico, VA to support defensive cyberspace operations and CSSP functions for our government customer. The role focuses on developing detection use cases, tuning SIEM/SOAR alerts, and improving logging and correlation rules to minimize false positives.

Qualified candidates will hold a Secret clearance to start with TS/SCI eligibility, and have a DoD 8570 CSSP Analyst certification, plus a relevant technical degree and multiple years of cybersecurity

Qualifications

• Bachelor's degree in a technical or managerial related discipline AND five (5) years of practical experience in Cybersecurity, Engineering, Information Technology, and/or Defensive Cyberspace Operations.
• High Diploma or equivalency certificate AND seven (7) years of practical experience in Cybersecurity, Engineering, Information Technology, and/or Defensive Cyberspace Operations.
• DoD 8570 CSSP Analyst certification is required.

Responsibilities

• Develop detection use cases based on current threats, the MITRE ATT&CK framework, and government direction.
• Review incident reporting to tune related detection use cases as necessary.
• Review SIEM/SOAR incident queue for unnecessary events and alerts and implement corrective actions.
• Identify gaps in logging and detection capabilities across attack surface.
• Assist in implementing new log ingestion and verify proper parsing and normalization of data in SIEM/SOAR.
• Create high fidelity correlation rules, signatures, filters, and automations and maintain low false-positive rate.

Education

High School Diploma or equivalency certificate

Bachelor's degree in a technical or managerial related discipline

DoD 8570 CSSP Analyst certification

Job description

Sentar is seeking a Detection Engineer in Quantico, VA to support defensive cyberspace operations and CSSP functions for our government customer. The role focuses on developing detection use cases, tuning SIEM/SOAR alerts, and improving logging and correlation rules to minimize false positives.

Qualified candidates will hold a Secret clearance to start with TS/SCI eligibility, and have a DoD 8570 CSSP Analyst certification, plus a relevant technical degree and multiple years of cybersecurity