SIEM Content Developer

About the role

The SIEM Lead position supports the Defense Logistics Agency (DLA) and will focus on enhancing security through threat detection and analytics.

Responsibilities

• Research and develop new threat detection use cases based on emerging threats and threat intelligence research.
• Collaborate with stakeholders and cybersecurity tool SMEs to identify gaps in security protection and analytics capabilities.
• Develop custom scripts to enhance SIEM functionality.
• Review quality of data feeds and recommend/implement improvements.
• Identify critical systems and application components to develop alerting priorities and create signatures tailored to individual programs and applications.

Requirements

• Five (5) years of relevant IT experience
• Three (3) years working with a SIEM in a content development or Incident Response role
• Three (3) years of System and/or Network Administration experience
• Understanding of various log formats
• Understanding of the MITRE ATT&CK framework
• Strong understanding of network architecture
• Experience developing and maintaining scripts (preferably using Powershell, Python or SPL)
• Understanding of Defense-in-Depth

Qualifications

• Current DOD Top Secret Clearance and eligibility for an IT-I Critical Sensitive security clearance or Tier 5 (T5) at time of proposal submission
• Baseline Certification for IT-II and CNDSP/CSSP-IR upon on-boarding
• One of the “Computer Network Defense” CE Certifications within six (6) months of on-boarding

Skills

• Understanding of various log formats
• MITRE ATT&CK framework
• Network architecture
• Script development (Powershell, Python, SPL)
• Defense-in-Depth principles

Benefits

• Medical, Dental, and Vision Plans (PPO & HSA options available)
• Flexible Spending Accounts (Health Care & Dependent Care FSA)
• Health Savings Account (HSA)
• 401(k) with matching contributions
• Roth Qualified Transportation Expense with matching contributions
• Short Term Disability
• Long Term Disability
• Life and Accidental Death & Dismemberment
• Basic & Voluntary Life Insurance
• Wellness Program
• PTO
• 11 Holidays
• Professional Development Reimbursement

Pay

Negotiable based on experience and qualifications.

Schedule

Full-time, Monday through Friday, with occasional evening and weekend work as needed.