Top Secret Cleared SIEM Content Developer for Detection

Amyx, Inc.; Fort Belvoir (VA); On-site; USD 110,000 - 140,000; Full time

Benefits offered by this job

Medical, Dental, Vision plans (PPO & H

Flexible Spending Accounts (FSA)

Health Savings Account (HSA)

401(k) with matching

Roth

Commuter benefits

Short Term Disability

Long Term Disability

Life Insurance

Wellness Program

PTO

11 Holidays

Professional Development Reimbursement

Job summary

Amyx, Inc. is seeking a SIEM Content Developer to bolster defensive analytics for the Defense Logistics Agency. The role focuses on researching and developing threat-detection use cases for security operations at government facilities.

The candidate will collaborate with stakeholders, build custom scripts, assess data feeds, and prioritize alerting for critical systems across programs and applications, contributing to mission assurance.

Qualifications

• Five years of relevant IT experience.
• Three years working with a SIEM in a content development or Incident Response role.
• Three years of System and/or Network Administration experience.
• Understanding of various log formats.
• Understanding of the MITRE ATT&CK framework.
• Strong understanding of network architecture.
• Experience developing and maintaining scripts (PowerShell, Python or SPL).
• Understanding of Defense-in-Depth.
• Must possess a current DOD Top Secret Clearance and be eligible for IT-I/TS or Tier 5 clearance at proposal time.
• Must have Baseline Certification for IT-II and CNDSP/CSSP-IR on boarding and one of the Computer Network Defense CE Certifications within six months.

Responsibilities

• Research and develop new threat detection use cases based on emerging threats and threat intelligence.
• Collaborate with stakeholders and cybersecurity SMEs to identify gaps in security protection and analytics capabilities.
• Develop custom scripts to enhance SIEM functionality.
• Review data feeds quality and implement improvements.
• Create signatures and alerts tailored to programs and applications.

Skills

SIEM content dev

PowerShell

Python

Splunk SPL

Network admin

MITRE ATT&CK

Security clearance

Tools

PowerShell

Python

Splunk SPL

Job description

Amyx, Inc. is seeking a SIEM Content Developer to bolster defensive analytics for the Defense Logistics Agency. The role focuses on researching and developing threat-detection use cases for security operations at government facilities.

The candidate will collaborate with stakeholders, build custom scripts, assess data feeds, and prioritize alerting for critical systems across programs and applications, contributing to mission assurance.