SIEM Content Developer
SIEM Content Developer
Employer Active
Job Alert
You will be updated with latest job alerts via email
Share
Job Alert
You will be updated with latest job alerts via email
Job Description
Wits Solutions Inc. (WITS) is a SBA certified 8(a) company with headquarters in the metropolitan Washington D.C. area. WITS has been providing best-in-class solutions in professional IT and administrative consulting to various Federal State Local and commercial customers. At WITS we believe in working not for our clients but with them. This is why right from the beginning; our analysts and solution-builders work closely with our clients to ensure that the project outcomes continue to deliver value long into the future.
SECURITY CLEARANCE
SECRET
EDUCATION/CERTIFICATIONS MANDATORY
- BS or BA degree in a relevant
- Must possess a current DOD Top Secret Clearance and be eligible for an IT-I Critical Sensitive
security clearance or Tier 5 (T5) at time of proposal submission. - Must have Baseline Certification for IT-II and CNDSP/CSSP-IR when on boarding and must have
one of the Computer Network Defense CE Certifications within six (6) months of on-boarding
WORK EXPERIENCE MANDATORY
- Five (5) years of relevant IT experience
- Three (3) years working with a SIEM in a content development or Incident Response role.
- Three (3) years of System and/or Network Administration experience
- Understanding of various log formats
- Understanding of the MITRE ATT&CK framework
- Strong understanding of network architecture
- Experience developing and maintaining scripts (preferably using Powershell Python or SPL)
- Understanding of Defense-in-Dept
EDUCATION/CERTIFICATIONS NICE TO HAVE
Certified content developer
ROLES AND RESPONSIBILITIES
Researches and develops new threat detection use cases based on emerging threats threat intelligence
research and Threat Detection Analyst feedback. Works with stakeholders and cybersecurity tool SMEs
to identify gaps in security protection and analytics capabilities. Develops custom scripts to enhance
SIEM functionality. Reviews the quality of data feeds and recommend and/or implement improvements.
Collaborates with stakeholders to identify critical systems and application components to develop
alerting priorities and create signatures tailored to individual programs and applications.
Employment Type
Full Time
