SIEM Content Developer w/TS

TekSynap•Columbus, OH

2d•$100,000 - $150,000•Onsite

About The Position

We are seeking a SIEM Content Developer with a Top Secret clearance. This role involves researching and developing new threat detection use cases, collaborating with stakeholders to identify security gaps, developing custom scripts to enhance SIEM functionality, and reviewing the quality of data feeds. The position is located at DLA Land and Maritime in Columbus, OH, and supports an upcoming government contract proposal, contingent upon contract award.

Requirements

Five (5) years of relevant IT experience
Three (3) years working with a SIEM in a content development or Incident Response role.
Three (3) years of System and/or Network Administration experience
Understanding of various log formats
Understanding of the MITRE ATT&CK framework
Strong understanding of network architecture
Experience developing and maintaining scripts (preferably using Powershell, Python or SPL)
Understanding of Defense-in-Depth
Top Secret, IT-I clearance
U.S. Citizen
Eligible for SCI

Responsibilities

Researches and develops new threat detection use cases based on emerging threats, threat intelligence research and Threat Detection Analyst feedback.
Works with stakeholders and cybersecurity tool SMEs to identify gaps in security protection and analytics capabilities.
Develops custom scripts to enhance SIEM functionality.
Reviews the quality of data feeds and recommend and/or implement improvements.
Collaborates with stakeholders to identify critical systems and application components to develop alerting priorities and create signatures tailored to individual programs and applications.