SIEM Content Developer – Intermediate Cyber Security

Ssd Anc; San Antonio (TX); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Paid holidays

401(k) with company match

Tuition reimbursement

Job summary

STS Systems Defense, LLC seeks a Signature Writer – Intermediate – Cyber Security to support Lackland AFB in San Antonio, TX. The role focuses on SIEM analysis, detections, dashboards, and automation to protect government networks.

You will work with ArcSight, Splunk, and ELK, develop use cases, and provide training to government personnel. A TS/SCI clearance and DoD cyber experience are essential for this on-site position at Lackland AFB.

Qualifications

• Active TS/SCI clearance required.
• GCFA or GMLE or GIAC equivalent certification is required.
• 5+ years SIEM experience (ArcSight, Splunk, ELK).
• 3+ years with network traffic analysis; BA/BS or MA/MS.
• 5+ years with DoD-grade IDS/IPS and MITRE ATT&CK framework usage.
• 1+ year with SOAR platforms; Python and PowerShell proficiency.

Responsibilities

• Analyze DCO events and apply SIEM best practices.
• Create detections by analyzing log data across the enterprise.
• Develop dashboards and visualizations to identify adversarial activity.
• Tune SIEM rules to reduce false positives and improve detections.
• Automate SIEM tasks with scripting languages.
• Provide training and knowledge transfer to government personnel.

Skills

Python

PowerShell

SOAR platforms

MITRE ATT&CK

Network traffic analysis

SIEM concepts

Education

BA/BS or MA/MS

Tools

ArcSight

Splunk

ELK

Phantom

Demisto

Job description

STS Systems Defense, LLC seeks a Signature Writer – Intermediate – Cyber Security to support Lackland AFB in San Antonio, TX. The role focuses on SIEM analysis, detections, dashboards, and automation to protect government networks.

You will work with ArcSight, Splunk, and ELK, develop use cases, and provide training to government personnel. A TS/SCI clearance and DoD cyber experience are essential for this on-site position at Lackland AFB.