SIEM Content Developer

DirectViz Solutions, LLC; Columbus (OH); On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Competitive compensation

Comprehensive medical benefits

401(k) match

Generous PTO accrual

Professional development reimbursement

Tech certifications

Employee recognition programs

Job summary

DirectViz Solutions, LLC in Columbus, OH is seeking an experienced SIEM Content Developer to research, develop, and enhance threat detection in a complex cybersecurity environment. You will create new detection use cases from emerging threats and threat intelligence, collaborating with security analysts and tool SMEs to improve monitoring and analytics.

The role focuses on custom scripts, SIEM content, and signatures tailored to critical systems, with the MITRE ATT&CK framework guiding

Qualifications

• Five (5) years of IT experience.
• Three (3) years with a SIEM in content development or incident response.
• Three (3) years of system and/or network administration experience.
• Understanding of various log formats.
• Understanding of the MITRE ATT&CK framework.
• Knowledge of Defense-in-Depth.
• Experience developing and maintaining scripts (PowerShell, Python or SPL).
• Current DoD Top Secret Clearance and eligibility for IT-I clearance.

Responsibilities

• Research and develop new threat detection use cases based on emerging threats and threat intel.
• Collaborate with stakeholders and tool SMEs to identify gaps in protection and analytics.
• Develop custom scripts to enhance SIEM functionality and automate monitoring.
• Review SIEM data feeds for quality and improve where needed.
• Analyze log sources to ensure relevant data is available for detection and investigation.
• Establish alerting priorities for critical systems and applications.
• Maintain detection signatures and alerts tailored to systems and programs.
• Support ongoing improvements of SIEM detection capabilities against evolving threats.
• Apply knowledge of network architecture, defense-in-depth, and MITRE ATT&CK in detection content.

Job description

DirectViz Solutions (DVS) is a dynamic and rapidly growing government contractor committed to delivering innovative IT solutions that address the mission-critical needs of our government clients. Through the expertise and dedication of our talented team, we provide cutting-edge technology services designed to achieve success and exceed expectations.

At DVS, we prioritize our employees as our greatest asset. We offer competitive compensation, comprehensive medical benefits, a 401(k) match, generous PTO accrual, professional development reimbursement, corporate-funded technology certifications, and robust employee recognition and appreciation programs.

Job Title

SIEM Content Developer

Location

Columbus, OH

Clearance

Top Secret

Job Summary

We are seeking an experienced SIEM Content Developer to research, develop, and enhance threat detection capabilities within a complex cybersecurity environment. This role focuses on creating new threat detection use cases based on emerging threats, threat intelligence, and feedback from security analysts.

The SIEM Content Developer will work closely with cybersecurity stakeholders, security tool SMEs, incident response teams, and threat detection analysts to identify gaps in security monitoring and analytics. The position will develop custom scripts and SIEM content, evaluate the quality of security data feeds, and create alerts and signatures tailored to critical systems and applications.

Key Responsibilities

• Research and develop new threat detection use cases based on emerging threats, threat intelligence research, and Threat Detection Analyst feedback.
• Work with stakeholders and cybersecurity tool SMEs to identify gaps in security protection and analytics capabilities.
• Develop custom scripts to enhance SIEM functionality and automate security monitoring activities.
• Review the quality and effectiveness of SIEM data feeds and recommend or implement improvements.
• Analyze log sources and ensure relevant security data is available for detection and investigation.
• Collaborate with stakeholders to identify critical systems and application components and establish appropriate alerting priorities.
• Develop and maintain detection signatures and alerts tailored to individual systems, programs, and applications.
• Support continuous improvement of SIEM detection capabilities based on evolving threats and operational requirements.
• Apply knowledge of network architecture, Defense-in-Depth, and the MITRE ATT&CK framework when developing detection content.

Minimum Requirements

• Five (5) years of relevant IT experience Three (3) years working with a SIEM in a content development or Incident Response role. Three (3) years of System and/or Network Administration experience Understanding of various log formats Understanding of the MITRE ATT&CK framework Strong understanding of network architecture Experience developing and maintaining scripts (preferably using Powershell, Python or SPL) Understanding of Defense-in-Depth Must possess a current DOD Top Secret Clearance and be eligible for an IT-I Critical Sensitive security clearance

If you thrive on solving complex problems and building meaningful connections, we'd love to hear from you. Join our team and make an impact today!

Physical and Mental Qualifications

• Maintain focus and awareness throughout scheduled working hours.
• Perform tasks requiring prolonged periods of sitting or standing at a desk, utilizing a computer, mouse, and keyboard.
• Lift and move objects weighing up to 15 pounds as needed.
• Exhibit excellent verbal and written communication skills, with a strong command of the English language.
• Demonstrate the ability to work independently while also collaborating effectively as part of a team.
• Quickly learn and retain routine tasks and processes.
• Possess strong organizational skills, attention to detail, business correspondence proficiency, and self-management capabilities.
• Perform the essential functions of the role satisfactorily; reasonable accommodation will be provided for employees with disabilities upon request.
• Accept and adapt to additional responsibilities or changes to assigned duties as determined by DirectViz Solutions (DVS).

DirectViz Solutions, LLC (DVS) is an equal opportunity employer who prohibits discrimination and harassment against any employee or applicant for employment based on race, , sex (including pregnancy), age, gender identity, creed, religion, national origin, sexual orientation, marital status, genetic information, disability, political affiliation, protected veteran status, or any other status protected by federal, state or local law.

DVS has a zero-tolerance policy for harassment, threats, coercion, discrimination, and intimidation. Employees may file a complaint or exercise any right protected by Executive Order 11246, Section 503 of the Rehabilitation Act of 1973, as amended, Section 4212 of the Vietnam Era Veterans Readjustment Assistance Act of 1974, or the Veterans Employment Opportunities Act of 1998.