Required Education/Certifications:
BACHELOR'S DEGREE IN AN INFORMATION TECHNOLOGY OR INFORMATION SECURITY RELATED FIELD
EIGHT YEARS OF RELEVANT WORK EXPERIENCE MAY BE SUBSTITUTED IN LIEU OF EDUCATION
FIVE YEARS OF EXPERIENCE IN SUPPORTING LARGE IT ENVIRONMENTS AND/OR SYSTEM DEPLOYMENTS
5+ years of Strong scripting and automation skills (Python, Bash, PowerShell, or similar).
Understanding of Sigma, YARA, and other industry standard detection languages.
Familiarity with MITRE ATT&CK framework
Preferred Skills (rank in order of Importance):
Experience with the Palo Alto Cortex XSIAM platform.
Deep understanding of Windows/Linux artifacts.
Preferred Education/Certifications:
CISSP, CISA, CISO or equivalent advanced security certification.
Additional relevant certifications (e.g., CEH, OSCP, GPEN).
VENDOR CERTIFICATIONS IN DETECTION ENGINEERING.
Resource is local to Columbia, South Carolina or a surrounding city in South Carolina
Additional skills and duties:
Proven experience with detection tuning/development..
Experience with dashboard creation and reporting.
Excellent communication and customer service skills for agency- facing engagement.
Experience in working in multi- tenancy environment
Experience in multi-agency or enterprise service projects.