SIEM Content Developer

5 hours ago

Columbus, OH, USASenior

Responsibilities

Research emerging threats and threat intelligence to develop new SIEM threat-detection use cases.
Collaborate with stakeholders, cybersecurity tool SMEs, and Threat Detection Analysts to identify analytics gaps and improve data feeds.
Develop and maintain custom scripts using PowerShell, Python, SPL, or similar scripting capabilities.
Create detection signatures, alerting priorities, and tailored SIEM content for critical systems, programs, and applications.
Assess threat-detection coverage gaps and advise cybersecurity leadership on detection practices and monitoring priorities.
Apply knowledge of log formats, MITRE ATT&CK, network architecture, and Defense-in-Depth to security analytics and detection capabilities.

Five years of relevant IT experience.
Three years of experience working with a SIEM in a content development or incident response role.
Three years of systems and/or network administration experience.
Current DoD Top Secret clearance with IT-I and T5 investigation.
At least one IAT-II certification, such as CCNA Security, CySA+, GICSP, GSEC, Security+ CE, or SSCP.
At least one CSSP IR/CSSP A certification, such as CEH, CFR, CySA+, GCIA, GCIH, GICSP, SCYBER, or GCFA.
Understanding of log formats, the MITRE ATT&CK framework, network architecture, and Defense-in-Depth.
Experience developing and maintaining scripts, preferably with PowerShell, Python, or SPL.

26 days of paid leave, including vacation, sick, personal time, and holidays.
Performance bonuses based on individual and company-wide results.
401(k) with a 3% company match and immediate vesting.
Company-paid life insurance up to $300,000, with additional coverage options.
Medical, dental, vision, FSA, and HSA plans.
15 days of fully paid parental leave.
Military differential pay.
Paid training and certifications, tuition reimbursement, and required work tools and technology.
Full-time onsite work at the customer's location in Columbus, OH.

PowerShellPython