Senior SIEM Content Architect

OCH Technologies LLC; Columbus (OH); On-site; USD 110,000 - 140,000; Full time

Benefits offered by this job

Paid time off

Medical, Dental & Vision Insurance

401(k)

Tuition Reimbursement

Short/Long-term disability

Job summary

OCH Technologies, LLC is seeking a SIEM Content Developer to support a Defense Logistics Agency program onsite in Columbus, OH. The role focuses on researching and developing threat detection use cases, creating automation scripts, and refining data feeds to improve detection and incident response.

A DoD Top Secret clearance eligibility is required for proposal submission and onboarding. The candidate will work with stakeholders and SMEs to target critical systems, establish alert priorities,

Qualifications

• Bachelor’s degree (BS or BA) in a technical discipline from an accredited university.
• Five (5) years of IT experience in cybersecurity, systems administration, network operations, or related technical functions.
• Three (3) years of experience with SIEM content development, security operations, or incident response.
• Three (3) years of system and/or network administration experience including configuration, maintenance, troubleshooting, and security of enterprise IT environments.
• Working knowledge of MITRE ATT&CK framework and its application to threat detection and incident response.
• Experience developing, maintaining, and enhancing scripts and automation (PowerShell, Python, SPL).
• Knowledge of defense-in-depth principles to protect enterprise systems, networks, and data.

Responsibilities

• Researches and develops new threat detection use cases based on emerging threats, threat intelligence, cybersecurity research, and analyst feedback.
• Collaborates with stakeholders and cybersecurity SMEs to identify gaps in protection, monitoring, detection, and analytics capabilities.
• Develops and maintains custom scripts and automation to enhance SIEM functionality and threat detection capabilities.
• Reviews cybersecurity data feeds for quality and data integrity, proposing improvements where needed.
• Collaborates to identify critical systems and establish alerting priorities and tailored detection signatures.

Skills

Threat detection

SIEM knowledge

Log analysis

MITRE ATT&CK

PowerShell

Python

SPL

Network architecture

Education

Bachelor's degree in a technical discipline

Tools

SIEM platforms

Scripting

Job description

OCH Technologies, LLC is seeking a SIEM Content Developer to support a Defense Logistics Agency program onsite in Columbus, OH. The role focuses on researching and developing threat detection use cases, creating automation scripts, and refining data feeds to improve detection and incident response.

A DoD Top Secret clearance eligibility is required for proposal submission and onboarding. The candidate will work with stakeholders and SMEs to target critical systems, establish alert priorities,