TS/SCI Threat Detection Engineer

RMC - Resource Management Concepts Inc.; Quantico (VA); Presencial; USD 120.000 - 140.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Relocation assistance

Paid vacation and federal holidays

Healthcare plans

401K plan

Descripción de la vacante

Resource Management Concepts, Inc. (RMC) seeks a Detection Engineer Analyst to support an active government contract in Quantico, VA, delivering defensive cyberspace operations and CSSP functions to protect IT services.

The role includes developing detection use cases based on MITRE ATT&CK, tuning detections, and maintaining low false positives while reviewing SIEM/SOAR data. A DoD clearance and relevant certifications are required.

Formación

• Active TS/SCI eligibility required.
• Bachelor’s degree in a technical or managerial discipline with 5+ years in Cybersecurity/IT/Defensive Cyberspace Operations OR an equivalent.
• HS Diploma or equivalency with 7 years of relevant experience.
• DoD 8570 IAT Level III certification is required.
• DoD 8570 CSSP Analyst certification is required.
• Experience writing signatures for network/host IDS/IPS (e.g., KQL/Snort/ePO/Yara).

Responsabilidades

• Develop detection use cases based on MITRE ATT&CK and current threats.
• Review incident reports to tune related detection use cases.
• Review SIEM/SOAR queues and implement corrective actions.
• Identify gaps in logging and detection across attack surface.
• Assist in implementing new log ingestion and verify parsing/normalization in SIEM/SOAR.
• Create high fidelity correlation rules, signatures, filters, and automations with low false positives.

Conocimientos

Active TS/SCI clearance

5+ years cyber/IT experience

Signature development (KQL/Snort/ePO/Y

Educación

College degree in technical/managerial discipline

HS Diploma with 7 years experience

Herramientas

DoD 8570 IAT Level III certification

DoD 8570 CSSP Analyst certification

Descripción del empleo

Resource Management Concepts, Inc. (RMC) seeks a Detection Engineer Analyst to support an active government contract in Quantico, VA, delivering defensive cyberspace operations and CSSP functions to protect IT services.

The role includes developing detection use cases based on MITRE ATT&CK, tuning detections, and maintaining low false positives while reviewing SIEM/SOAR data. A DoD clearance and relevant certifications are required.