Detection Engineer Analyst

Resource Management Concepts • Quantico, VA

5d • Onsite

About The Position

Resource Management Concepts, Inc. (RMC) is hiring a Detection Engineer Analyst to support an active government contract in Quantico, Virginia. The role provides defensive cyberspace operations and Cyber Security Service Provider (CSSP) functions in support of the government’s mission to deny, disrupt, and degrade adversaries’ attempts to disrupt, exploit, or attack information technology services provided to network users. The position is essential and may require reporting during emergencies, including hazardous weather, power outages, fuel shortages, and pandemics.

Requirements

• Active TS/SCI eligibility is required. The selected applicant may begin supporting the position with an active DoD SECRET clearance and must maintain eligibility for access to classified information.
• Either a college degree in a technical or managerial-related discipline and five years of practical experience in cybersecurity, engineering, information technology, and/or defensive cyberspace operations; or a high school diploma or equivalency certificate and seven years of practical experience in those fields.
• DoD 8570 IAT Level III certification.
• DoD 8570 CSSP Analyst certification.
• Experience writing signatures (e.g., KQL, Snort, ePO, or YARA) for network and host IDS/IPS.

Nice To Haves

• Microsoft Cloud Security training.
• Microsoft Azure and Microsoft Defender XDR training.
• Microsoft Sentinel Ninja Training.
• Microsoft Defender for Endpoint Ninja Training.
• Microsoft Defender for Identity Ninja Training.
• Microsoft SC-XXX training or certifications.

Responsibilities

• Develop detection use cases based on current threats, the MITRE ATT&CK framework, and government direction.
• Review incident reporting and tune related detection use cases as necessary.
• Review SIEM/SOAR incident queues for unnecessary events and alerts and implement corrective actions.
• Identify gaps in logging and detection capabilities across the attack surface.
• Assist in implementing new log ingestion and verify proper parsing and normalization of data in SIEM/SOAR.
• Create and maintain high-fidelity correlation rules, signatures, filters, and automations while maintaining a low false-positive rate.

Benefits

• Career growth and investment in employee training, certification, and education.
• Tuition assistance.
• Paid relocation assistance.
• Paid vacation package.
• 11 paid federal holidays.
• High-quality, low-deductible healthcare plans.
• Pet insurance.
• Competitive 401(k) package.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: High school or GED