Cybersecurity Engineer W/Top Secret Clearance

TekSynap•Columbus, OH

3h•Onsite

About The Position

We are seeking a Cybersecurity Engineer with a Top Secret Clearance. This role involves research and development of new threat detection use cases, working with stakeholders to identify security gaps, developing custom scripts to enhance SIEM functionality, reviewing data feed quality, and collaborating to identify critical systems for alerting and signature development.

Requirements

Five (5) years of relevant IT experience.
Three (3) years of experience working with a SIEM in a content development or Incident Response role.
Three (3) years of experience as a System and /or Network Administrator.
Understanding of various log formats.
Understanding of MITRE ATT&CH framework.
Strong understand of network architecture.
Experience developing and maintaining scripts (preferably using PowerShell, Python, SPL).
Understanding of Defense-in-Depth
Demonstrated experience supporting government agencies, customers, or contracts within federal environments. This includes the Intelligence Community (IC), Department of Defense (DoD), Federal Civil agencies, and military organizations.
DoD 8140 (DoDD 8570) IAT Level II Baseline Certification (At least one of these: Cisco Certified Network Associate Security (CCAN-Security), COMPTIA Cybersecurity Analyst (CySA+), Certified Network Defender (CND), COMPTIA Security+ CE).
CSSP Incident Responder (at least one of these or at least on the CSSP Auditor certs: Certified Ethical Hacker (CEH), Cyber Security First Responder (CFR), Computer Hacking Forensic Investigator (CHFI), Coutd+).
OR CSSP Analyst (Certified Ethical Hacker (CEH), Cyber Security First Responder (CFR), Cybersecurity Analyst Plus (CySA+)).
Top Secret, IT-I with SCI Eligibility.
U.S. Citizen

Nice To Haves

Prior experience supporting the same or similar contract, with an in-depth understanding of the customer environment, requirements, and operational landscape, is highly desirable.

Responsibilities

Research and development of new threat detection use cases based on emerging threats, threat intelligence research and Threat Detection Analyst feedback.
Work with DLA stakeholders and cybersecurity tool SMEs to identify gaps in security protections and analytics capabilities.
Develop custom scripts to enhance SIEM functionality.
Review the quality of data feeds and recommend and/or implement improvements.
Collaborate with stakeholders to identify critical systems and application components to develop alerting priorities and create signatures tailored to individual programs and applications.