SIEM Content Developer - Threat Detection & Automation

electro soft; Columbus (OH); On-site; USD 145,000 - 155,000; Full time

Job summary

Electrosoft Services, LLC is seeking a SIEM Content Developer to research and develop new threat detection use cases based on emerging threats and analyst feedback. You will collaborate with stakeholders and SIEM SMEs to tailor signatures and improve analytics capabilities.

The role requires 5+ years IT experience, 3+ years with a SIEM, admin experience, scripting with PowerShell/Python/SPL, and knowledge of MITRE ATT&CK. A TS/IT-I- or Tier 5-ready clearance is required or pursued.

Qualifications

• Five (5) years of relevant IT experience.
• Three (3) years working with a SIEM in a content development or Incident Response role.
• Three (3) years of System and/or Network Administration experience.
• Understanding of the MITRE ATT&CK framework.
• Strong understanding of network architecture.
• Experience developing and maintaining scripts (PowerShell, Python or SPL).
• Must possess a current DOD Top Secret Clearance or eligibility for IT-I/ Tier 5 at time of proposal submission.

Responsibilities

• Researches and develops new threat detection use cases based on emerging threats, threat intelligence research and Threat Detection Analyst feedback.
• Develops custom scripts to enhance SIEM functionality.
• Reviews data feeds quality and recommends improvements.
• Collaborates with stakeholders to identify critical systems and applications and create signatures.

Tools

PowerShell

Python

SPL

Job description

Electrosoft Services, LLC is seeking a SIEM Content Developer to research and develop new threat detection use cases based on emerging threats and analyst feedback. You will collaborate with stakeholders and SIEM SMEs to tailor signatures and improve analytics capabilities.

The role requires 5+ years IT experience, 3+ years with a SIEM, admin experience, scripting with PowerShell/Python/SPL, and knowledge of MITRE ATT&CK. A TS/IT-I- or Tier 5-ready clearance is required or pursued.