Threat Detection SIEM Content Developer

Y-Tech, LLC; Fort Belvoir (VA); On-site; USD 80,000 - 110,000; Full time

Job summary

A leading company is seeking a cybersecurity professional to enhance threat detection capabilities. The role involves developing use cases, collaborating with stakeholders, and improving SIEM functionality. Candidates must have extensive IT experience and relevant certifications.

Qualifications

• Five years of relevant IT experience.
• Three years working with a SIEM in content development or Incident Response.

Responsibilities

• Research and develop new threat detection use cases.
• Collaborate with stakeholders to identify critical systems.

Skills

Understanding of various log formats

Understanding of the MITRE ATT&CK framework

Strong understanding of network architecture

Experience developing and maintaining scripts

Education

Baseline Certification for IT-II and CNDSP/CSSP-IR

Tools

PowerShell

Python

SPL

Job description

A leading company is seeking a cybersecurity professional to enhance threat detection capabilities. The role involves developing use cases, collaborating with stakeholders, and improving SIEM functionality. Candidates must have extensive IT experience and relevant certifications.