SIEM Content Developer & Detection Engineer

Esmcorp; Columbus (OH); On-site; USD 95,000 - 120,000; Full time

Job summary

Enterprise Solutions and Management (ESM) seeks a SIEM Content Developer to research and develop threat-detection use cases, collaborating with stakeholders to identify gaps in controls and data quality. The role involves scripting to enhance SIEM capabilities and prioritizing alerting for critical systems.

Candidate must have CSSP Analyst certification or equivalent, SIEM content development experience, and relevant IT background. Top Secret clearance is required for federal programs.

Qualifications

• Five years of relevant IT experience.
• Three years with a SIEM in content development or incident response.
• Three years of system and/or network administration experience.
• Must maintain CSSP Analyst certification (CEH, CFR, GCIA, GCISP) or equivalent.
• SIEM certification required.

Responsibilities

• Research and develop threat detection use cases based on emerging threats, threat intelligence, and analyst feedback.
• Collaborates with stakeholders and cybersecurity tool SMEs to identify gaps in security controls, analytics, and data quality.
• Develops custom scripts to enhance SIEM capabilities and improves data feeds to support effective detection.
• Identifies critical systems and application components to establish alerting priorities and develop tailored detection signatures.

Skills

data interpretation

log formats

MITRE ATT&CK

python powershell spl

defense in depth

Job description

Enterprise Solutions and Management (ESM) seeks a SIEM Content Developer to research and develop threat-detection use cases, collaborating with stakeholders to identify gaps in controls and data quality. The role involves scripting to enhance SIEM capabilities and prioritizing alerting for critical systems.

Candidate must have CSSP Analyst certification or equivalent, SIEM content development experience, and relevant IT background. Top Secret clearance is required for federal programs.