Siem Content Developer

Description

The company is an IT and management consulting firm based in the Washington, DC area, founded in 1996.

It provides full-cycle IT consulting and management support to both private and public sector clients.

You will join a multi-disciplinary team.

Responsibilities

• Research new threat detection use cases based on emerging threats, threat intelligence and feedback from Threat Detection Analysts.
• Work with stakeholders and security tool subject matter experts to find gaps in protection and analytics.
• Write custom scripts that extend SIEM functionality.
• Check the quality of data feeds and recommend or make improvements.
• Work with stakeholders to identify critical systems and application components, set alert priorities, and build signatures for individual programs and applications.

Requirements

• Five (5) years of relevant IT experience.
• Three (3) years working with a SIEM in content development or Incident Response.
• Three (3) years of system and/or network administration experience.
• Understanding of multiple log formats.
• Understanding of the MITRE ATT&CK framework.
• Strong grasp of network architecture.
• Understanding of Defense-in-Depth.
• Experience writing and maintaining scripts, preferably in Powershell, Python or SPL.

Conditions

Top Secret clearance required.

The company is an equal opportunity employer that welcomes veterans and people with disabilities.

Benefits

• Comprehensive healthcare coverage: medical, dental, vision and disability.
• 401k with 100% vesting from day one and an employer match after 90 days.
• Educational assistance program.
• Student loan repayment program.
• Gym reimbursement program.
• Paid time off.