Detection Engineer

Sentar•Quantico, VA

1d•Onsite

About The Position

Sentar is seeking a Detection Engineer in Quantico, Virginia, to support a customer with defensive cyberspace operations and Cyber Security Service Provider (CSSP) functions. The role supports the government’s mission to deny, disrupt, and degrade adversaries’ ability to disrupt, exploit, or attack the IT services provided to network users. The position develops and maintains threat-informed detection capabilities, reviews incident and SIEM/SOAR activity, identifies logging and detection gaps, and supports ingestion and normalization of security data. The position requires a Secret clearance to start and eligibility for TS/SCI.

Requirements

Secret clearance to start; TS/SCI eligibility required.
DoD 8570 IAT Level III certification.
DoD 8570 CSSP Analyst certification.
Either a bachelor’s degree in a technical or managerial related discipline and five years of practical experience in cybersecurity, engineering, information technology, and/or defensive cyberspace operations, or a high school diploma or equivalency certificate and seven years of such practical experience.

Nice To Haves

Microsoft Cloud Security training is highly recommended.
Microsoft Azure and Microsoft Defender XDR training or experience.
Microsoft Sentinel Ninja Training.
Microsoft Defender for Endpoint Ninja Training.
Microsoft Defender for Identity Ninja Training.
Microsoft SC-XXX training or certifications.

Responsibilities

Develop detection use cases based on current threats, the MITRE ATT&CK framework, and government direction.
Review incident reporting and tune related detection use cases as necessary.
Review the SIEM/SOAR incident queue for unnecessary events and alerts and implement corrective actions.
Identify gaps in logging and detection capabilities across the attack surface.
Assist with implementing new log ingestion and verify proper parsing and normalization of data in SIEM/SOAR.
Create and maintain high-fidelity correlation rules, signatures, filters, and automations while maintaining a low false-positive rate.

Benefits

Voluntary medical, dental, and vision insurance, with flexible spending plan options.
Voluntary life, critical illness, accident, and long-term care insurance options.
Group term life insurance and short-term and long-term disability coverage for qualifying employees.
401(k) match.
PTO plan that increases with years of service.
Holiday schedule and other leave programs, including bereavement, maternity, jury, and military duty leave.
Tuition reimbursement.
Professional development reimbursement.
Recognition and awards programs.
Employee ownership.