SIEM Threat Detection Content Engineer

Age-Solutions; Columbus (OH); On-site; USD 104,000 - 127,000; Full time

Benefits offered by this job

26 Days Paid Leave

Performance Bonuses

401(k) with Match

Health Benefits

Parental Leave

Military Differential Pay

Professional Growth

Shared Success

Job summary

AGE Solutions is seeking an experienced SIEM Content Developer to support development of cybersecurity threat detection. You will research threats, develop detection use cases, and create signatures tailored to critical systems. Collaboration with stakeholders and Threat Detection Analysts is essential.

Applicants should have TS clearance and robust scripting experience. This full-time onsite role is based in Columbus, OH, and offers competitive compensation and benefits.

Qualifications

• Five (5) years of relevant IT experience.
• Three (3) years of experience working with a SIEM in a content development or Incident Response role.
• Three (3) years of System and/or Network Administration experience.
• Must possess a current DoD Top Secret Clearance with IT-I, T5 investigation.
• Must have at least one IAT-II Certification from the listed options.
• Must have at least one CSSP IR / CSSP A certification from the listed options.

Responsibilities

• Research and develop new threat detection use cases based on emerging threats and threat intelligence.
• Collaborate with stakeholders and cybersecurity tool SMEs to identify gaps in protection.
• Develop custom scripts to enhance SIEM functionality and threat detection capabilities.
• Review the quality of SIEM data feeds and recommend improvements.
• Collaborate to identify critical systems and components and develop alerting priorities.
• Create signatures tailored to individual programs and applications.
• Develop and maintain scripts using PowerShell, Python, SPL, or similar languages.
• Apply knowledge of log formats and MITRE ATT&CK framework in development.
• Apply knowledge of network architecture and Defense-in-Depth in analytics.

Skills

SIEM content development

Threat detection

PowerShell

Python

SPL

MITRE ATT&CK

Network architecture

Tools

PowerShell

Python

SPL

Job description

AGE Solutions is seeking an experienced SIEM Content Developer to support development of cybersecurity threat detection. You will research threats, develop detection use cases, and create signatures tailored to critical systems. Collaboration with stakeholders and Threat Detection Analysts is essential.

Applicants should have TS clearance and robust scripting experience. This full-time onsite role is based in Columbus, OH, and offers competitive compensation and benefits.