SIEM Content Developer

ESM

  • Columbus, OH
  • 8 days ago
  • Full-time

Highlights

Three (3) years of System and/or Network Administration experienceMust maintain CSSP Analyst certification by having one of the following or equivalent - (CEH, CFR, GCIA, GCISP)SIEM certificationMinimum Clearance Top SecretPhysical RequirementsRequired to stand, walk and sit; communicate verbally both in person and by telephone; use hands to finger, handle or feel objects or controls; reach with hands and arms. Required Knowledge, Skills and Abilities (KSA) Skill collecting and interpreting qualitative and quantitative data from multiple sources Knowledge of log formats and network architecture.

Numbers & Facts

LocationColumbus, OH
Job TypeFull-time

Description

Enterprise Solutions and Management (ESM) is a rapidly growing government contractor that provides strategic IT services that meet mission needs for Defense and Federal customers. We are hiring a SIEM Content Developer to support an enterprise-level program within a federal environment.Job Description and ResponsibilitiesResearch and develop threat detection use cases based on emerging threats, threat intelligence, and analyst feedback. Collaborates with stakeholders and cybersecurity tool SMEs to identify gaps in security controls, analytics, and data quality. Develops custom scripts to enhance SIEM capabilities and improves data feeds to support effective detection. Identifies critical systems and application components to establish alerting priorities and develop tailored detection signatures.Required Knowledge, Skills and Abilities (KSA) Skill collecting and interpreting qualitative and quantitative data from multiple sources Knowledge of log formats and network architecture. Knowledge of the MITRE ATT&CK framework Skill developing and maintaining scripts with Python, Powershell or SPL Ability to understand Defense in DepthDesired KSABe a positive, self-motivated, and proactive person with the ability to adapt to change and tolerate stressful situationsCandidate must communicate effectively with team members, team lead, management, and government customersMust have the ability and desire to research and develop creative solutions to unique problems with minimal supervisionMinimum Training, Education, and CertificationsFive (5) years of relevant IT experienceThree (3) years working with a SIEM in a content development or Incident Response role.Three (3) years of System and/or Network Administration experienceMust maintain CSSP Analyst certification by having one of the following or equivalent - (CEH, CFR, GCIA, GCISP)SIEM certificationMinimum Clearance Top SecretPhysical RequirementsRequired to stand, walk and sit; communicate verbally both in person and by telephone; use hands to finger, handle or feel objects or controls; reach with hands and arms. Regularly required to stoop, kneel, bend, crouch and lift up to 25 pounds. Specific vision abilities required by this job include close vision, distance vision, depth perception, color vision and the ability to adjust focus.Physical demands associated with this position include extensive walking (including stairs) throughout offices and between buildings. May require use of public transportation, personal or Government vehicle to drive to local and/or remote office locations.Additional RequirementsOther duties as assignedESM provides equal employment opportunity to all individuals regardless of race, color, creed, religion, gender, age, sexual orientation, national origin or ancestry, disability, genetic information, veteran status, gender identification or any other characteristic protected by state, federal or local law.

Similar Jobs

See more jobs