Threat Detection SIEM Content Developer

Goldbelt, Inc.; Columbus (OH); Vor Ort; USD 99.000 - 175.000; Vollzeit

Benefits dieser Stelle

Medical insurance

Dental insurance

Vision insurance

401(k) with match

Paid time off

Professional development

Zusammenfassung

Goldbelt, Inc. is seeking a SIEM Content Developer to research and develop new threat detection use cases based on emerging threats, threat intelligence research and analyst feedback.

The role involves working with stakeholders and cybersecurity SMEs to identify gaps, develop custom scripts to enhance SIEM capabilities, and tailor alerting signatures for specific programs. Candidates should have extensive experience with SIEM, scripting, and network defense concepts.

Qualifikationen

• Five years of IT experience
• Three years with a SIEM in content development or incident response
• Three years of system and/or network administration experience
• Experience developing and maintaining scripts (PowerShell, Python or SPL)
• Must possess a current DoD Top Secret Clearance and be eligible for IT-I/ Tier 5 at proposal time

Aufgaben

• Identify gaps in security protection and analytics with stakeholders and SMEs
• Develop custom scripts to enhance SIEM functionality and review data feeds for improvements
• Collaborate to identify critical systems and create alerts and signatures for programs
• Perform other duties as needed or required

Kenntnisse

Log formats understanding

MITRE ATT&CK knowledge

Network architecture

Defense-in-Depth

Analytical skills

Collaborative work with diverse teams

Ausbildung

Bachelor’s degree in a related field

Tools

PowerShell

Python

Splunk SPL

Jobbeschreibung

Goldbelt, Inc. is seeking a SIEM Content Developer to research and develop new threat detection use cases based on emerging threats, threat intelligence research and analyst feedback.

The role involves working with stakeholders and cybersecurity SMEs to identify gaps, develop custom scripts to enhance SIEM capabilities, and tailor alerting signatures for specific programs. Candidates should have extensive experience with SIEM, scripting, and network defense concepts.