DescriptionA Content Developer contractor employee implements use cases based on mission requirements that provide Analysts with a manageable SIEM view of security incidents, complete with workflow and reporting. Additionally, Content Developer contractor employees shall provide proactive housekeeping of associated content (use cases) with consideration for revisions and/or decommissioning. Content Developer contractor employees shall be in close collaboration with DO and DM leadership to ensure tasks align with squadron requirements, priorities, and future initiatives.
Duties:- Analyze DCO events.
- Apply current industry SIEM best-practices.
- Use security alerts correlated with log enrichment data to enhance the operator's ability to identify real attacks.
- Establish security control effectiveness and monitor for unauthorized outbound connections
- Create detections by analyzing log data across the enterprise
- Develop dashboards and visualizations to identify adversarial activity.
- Use log data to establish and implement virtual tripwires for early detection.
- Analyze and ingest security logs into the SIEM in order to optimize for performance of the SIEM.
- Conduct designing, implementing, and testing of various SIEM solutions.
- Create and support the creation of SIEM Use Cases and understand what alerts and log enrichment is necessary to meet the required acceptable false positive rate.
- Create, test, and validate filters and rules.
- Build and implement event correlation rules, logic, and content in the SIEM.
- Tune SIEM event correlation rules and logic to filter out security events associated with known and well established network behavior, known false positives and/or known errors.
- Analyze malware threats to develop behavior based detections that alert and/or prevent malicious activity.
- Automate tasks in the SIEM using a common programming or scripting language.
- Create scheduled and ad-hoc reporting with SEIM tools.
- Create and maintain SIEM documentation.
- Develop and execute a process to review and maintain SIEM resources such as rules, filters, lists, trends and reports.
- Utilize SIEM to develop metrics collection, analysis, and create reports upon request.
- Provide training to government personnel as requested.
- Provide knowledge transfer of tools, processes and procedures to government personnel as requested.
- Provide OJT to other contractor employees, military, and/or civilian personnel, and ensure continuity folders/working aids are updated at least once per quarter in order to ensure efficient transition when personnel rotate.
- Maintain currency on latest industry trends and provide operational reports/assessments for development of tactics, techniques, and procedures.
- Create, document, and report metrics for analysis to improve weapon system processes and mission execution.
- Support operational leaderships tasking as it relates to Content Development functions and responsibilities
SkillsSecurity, Siem, Python, Scripting, Security operations, Linux, arcsight, splunk, elk stack, Network traffic, Content development, ids, Endpoint protection, Vulnerability detection, Penetration test, Risk management, Threat hunting, Digital forensics
Top Skills DetailsSecurity,Siem,Python,Scripting,Security operations,Linux,arcsight,splunk,elk stack
Additional Skills & Qualifications- Active TS/SCI
- More than 5 years of SIEM technology such as ArcSight, Splunk, and/or ELK.
- More than 3 years with network traffic analysis, ports, and protocols. BA/BS or MA/MS
- More than five (5) years of SIEM technology such as Arcsight, Splunk and/or ELK. Including, but not limited to, log handling, reports, filters, rule creation.
- Extensive knowledge with IDS/IPS systems currently in use by the Department of Defense (DoD), Services, and Agencies (i.e., Air Force, Navy, Army, DC3, DISA).
- More than three (3) years of experience with Network Traffic Analysis; ports and protocols. SANS GCDA or equivalent certification(s).
- Extensive knowledge of MITRE ATT&CK framework, and its uses within the cybersecurity community (e.g., Open Source projects)
Desired:Additionally, more than one (1) year of experience with Security, Orchestration, Automation, and Response (SOAR) platforms such as Phantom and/or Demisto. Proficient in Python and PowerShell.
Job Type & LocationThis is a Contract to Hire position based out of San Antonio, TX.
Pay and BenefitsThe pay range for this position is $45.00 - $62.00/hr.
Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to specific elections, plan, or program terms. If eligible, the benefits available for this temporary role may include the following: Medical, dental & vision Critical Illness, Accident, and Hospital 401(k) Retirement Plan - Pre-tax and Roth post-tax contributions available Life Insurance (Voluntary Life & AD&D for the employee and dependents) Short and long-term disability Health Spending Account (HSA) Transportation benefits Employee Assistance Program Time Off/Leave (PTO, Vacation or Sick Leave)
Workplace TypeThis is a fully onsite position in San Antonio,TX.
Application DeadlineThis position is anticipated to close on Feb 28, 2026.
>About TEKsystems:
We're partners in transformation. We help clients activate ideas and solutions to take advantage of a new world of opportunity. We are a team of 80,000 strong, working with over 6,000 clients, including 80% of the Fortune 500, across North America, Europe and Asia. As an industry leader in Full-Stack Technology Services, Talent Services, and real-world application, we work with progressive leaders to drive change. That's the power of true partnership. TEKsystems is an Allegis Group company.
The company is an equal opportunity employer and will consider all applications without regards to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.
About TEKsystems and TEKsystems Global Services We're a leading provider of business and technology services. We accelerate business transformation for our customers. Our expertise in strategy, design, execution and operations unlocks business value through a range of solutions. We're a team of 80,000 strong, working with over 6,000 customers, including 80% of the Fortune 500 across North America, Europe and Asia, who partner with us for our scale, full-stack capabilities and speed. We're strategic thinkers, hands-on collaborators, helping customers capitalize on change and master the momentum of technology. We're building tomorrow by delivering business outcomes and making positive impacts in our global communities. TEKsystems and TEKsystems Global Services are Allegis Group companies. Learn more at TEKsystems.com.
The company is an equal opportunity employer and will consider all applications without regard to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.
Never miss an opportunity! Create an alert based on the job you applied for.