SIEM Content Developer (62206)

BMA; Columbus (OH); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

401(k) match

Employee Stock Ownership Plan (ESOP)

Healthcare options

Dental and vision coverage

Short- and long-term disability

Job summary

BMA is seeking a SIEM Content Developer in Columbus, OH to support an upcoming proposal effort. This contingent position requires eligibility for a DoD Top Secret clearance and IT-I/ Tier 5 at proposal submission.

The role focuses on researching and developing threat-detection use cases, scripting for SIEM enhancements, data-feed quality, and collaboration with stakeholders to prioritize alerts. The candidate will work with cybersecurity tool SMEs to fill gaps in protection, create signatures

Qualifications

• Five years of relevant IT experience.
• Three years of SIEM experience in content development or incident response.
• Three years of system and/or network administration experience.
• Understanding of various log formats.
• Understanding of the MITRE ATT&CK framework.
• Strong understanding of network architecture.
• Experience developing and maintaining scripts using PowerShell, Python, or SPL.
• Understanding of defense-in-depth concepts.

Responsibilities

• Researches and develops new threat detection use cases based on emerging threats and threat intel.
• Collaborates with stakeholders and tool SMEs to identify gaps and prioritize analytics.
• Develops custom scripts to enhance SIEM functionality.
• Reviews data feeds quality and implements improvements.
• Identifies critical systems, establishes alerting priorities, and creates tailored signatures.

Skills

IT experience

SIEM experience

Sys/Net admin

Log formats

MITRE ATT&CK

Network architecture

Scripting (PowerShell/Python/SPL)

Defense-in-Depth

Job description

BMA is seeking a SIEM Content Developer to join our team in Columbus, OH in support of an upcoming proposal effort. This is a contingent position, with employment dependent upon contract award.

Job Summary

The SIEM Content Developer researches and develops new threat detection use cases based on emerging threats, threat intelligence research, and Threat Detection Analyst feedback. Works with stakeholders and cybersecurity tool SMEs to identify gaps in security protection and analytics capabilities. Develops custom scripts to enhance SIEM functionality. Reviews the quality of data feeds and recommends and/or implements improvements. Collaborates with stakeholders to identify critical systems and application components, establish alerting priorities, and create signatures tailored to individual programs and applications.

Clearance Requirements

There is a DoD Top Secret Clearance requirement for this role and be eligible for an IT-I Critical Sensitive security clearance or Tier 5 (T5) at time of proposal submission.

Required Skills & Certifications

• Five (5) years of relevant IT experience
• Three (3) years of experience working with a SIEM in a content development or Incident Response role
• Three (3) years of System and/or Network Administration experience
• Understanding of various log formats
• Understanding of the MITRE ATT&CK framework
• Strong understanding of network architecture
• Experience developing and maintaining scripts, preferably using PowerShell, Python, or SPL
• Understanding of Defense-in-Depth

Other Duties

This job description is not designed to cover or contain a comprehensive listing of activities, duties, or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.

Overview

BMA is an employee-owned small business headquartered in Huntsville, AL that provides superior customer service by empowering all levels of our staff to make timely decisions to produce high-quality results. BMA fosters an environment of passion, precision, and dedication in order to fulfill our commitments to our partners, government, and country.

Benefits

• We believe that our employees well-being is paramount to our success so our benefits package has been crafted with that in mind.
• We offer multiple healthcare coverage options to include low deductible, high deductible, and plans eligible for our Health Savings Account (HSA) option.
• Along with medical coverage, employees have dental, vision, accident & illness, short- and long-term disability all available to them.
• BMA proudly maintains a 401(k) plan with an industry leading 6% match that can include profit sharing based on company performance.
• Lastly, being an employee-owned company means that BMA offers a 100% Employee Stock Ownership Plan (ESOP), providing eligible employees the opportunity to earn stock in BMA, subject to plan eligibility and vesting requirements.

AAP & EEO Statement

BMA Technical Services, Inc. is an Equal opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regards to race, color, religion, religious creed, gender, sexual orientation, gender identity, gender expression, transgender, pregnancy, marital status, national origin, ancestry, citizenship status, age, disability, protected Veteran Status, genetics or any other characteristics protected by applicable Federal, State, or Local Law.