SIEM Content Engineer: Threat Detection & Analytics

Titan Technologies; Columbus (OH); On-site; USD 90,000 - 150,000; Full time

Job summary

Zen Strategics, a Titan Technologies company, is seeking a SIEM Content Developer to support the Defense Logistics Agency. This program provides highly specialized Cyber Defense analysis, Cybersecurity Content Development, Vulnerability Management (VM), and OT cybersecurity support.

You will research new threat detection use cases, work with cybersecurity SMEs to identify gaps in protection and analytics capabilities, develop scripts to enhance SIEM, and tailor signatures for programs while

Qualifications

• Current DOD Top Secret Clearance and eligibility for IT-I/ Tier 5 security clearance.
• Five years of relevant IT experience.
• Three years with a SIEM in content development or Incident Response.
• Three years of System and/or Network Administration experience.
• Understanding of log formats.
• Understanding of MITRE ATT&CK framework.
• Strong understanding of network architecture.
• Experience developing and maintaining scripts (PowerShell, Python or SPL).
• Understanding of Defense-in-Depth.

Responsibilities

• Research and develop new threat detection use cases based on emerging threats, threat intelligence research and Threat Detection Analyst feedback.
• Work with stakeholders and cybersecurity tool SMEs to identify gaps in security protection and analytics capabilities.
• Develop custom scripts to enhance SIEM functionality.
• Review the quality of data feeds and recommend and/or implement improvements.
• Collaborate with stakeholders to identify critical systems and application components to develop alerting priorities and create signatures tailored to individual programs and applications.

Skills

DOD Top Secret Clearance

IT-I / Tier 5 clearance

5+ years IT experience

3+ years with SIEM

3+ years Sys/Net Admin

Log formats understanding

MITRE ATT&CK

Network architecture

Scripting: PowerShell/Python/SPL

Defense-in-Depth

Job description

Zen Strategics, a Titan Technologies company, is seeking a SIEM Content Developer to support the Defense Logistics Agency. This program provides highly specialized Cyber Defense analysis, Cybersecurity Content Development, Vulnerability Management (VM), and OT cybersecurity support.

You will research new threat detection use cases, work with cybersecurity SMEs to identify gaps in protection and analytics capabilities, develop scripts to enhance SIEM, and tailor signatures for programs while