Search Jobs | Dice.com

1 results (0 new)

Group by company

Content Developer (SIEM Cyber Security)

BBNC

San Antonio, Texas • Today

Full-time

Job Details

Skills

Security Controls
Dashboard
Testing
Use Cases
Malware Analysis
Scripting Language
Ad Hoc Reporting
SEIM
Documentation
Training
Knowledge Transfer
Military
Reporting
Content Development
Machine Learning (ML)
Computer Science
Business Analytics
Business Analysis
Mergers and Acquisitions
SIEM
ArcSight
Splunk
IDS
IPS
DoD
Adobe AIR
Network
SANS
Cyber Security
Open Source
Orchestration
Python
Windows PowerShell
STS
Insurance
Life Insurance
SSD
Recruiting
Law

Security Controls
Dashboard
Testing
Use Cases
Malware Analysis
Scripting Language
Ad Hoc Reporting
SEIM
Documentation
Training
Knowledge Transfer
Military
Reporting
Content Development
Machine Learning (ML)
Computer Science
Business Analytics
Business Analysis
Mergers and Acquisitions
SIEM
ArcSight
Splunk
IDS
IPS
DoD
Adobe AIR
Network
SANS
Cyber Security
Open Source
Orchestration
Python
Windows PowerShell
STS
Insurance
Life Insurance
SSD
Recruiting
Law

Summary

STS Systems Defense, LLC (SSD) is a government consulting and contracting firm supporting federal agencies and military installations across the U.S. We are seeking a Content Developer (SIEM Cyber Security) at Lackland AFB in San Antonio, TX.

What You'll Do:

Analyze DCO events.
Apply current industry SIEM best-practices.
Use security alerts correlated with log enrichment data to enhance the operator's ability to identify real attacks.
Establish security control effectiveness and monitor for unauthorized outbound connections
Create detections by analyzing log data across the enterprise. (CDRL A007)
Develop dashboards and visualizations to identify adversarial activity. (CDRL A007)
Use log data to establish and implement virtual tripwires for early detection.
Analyze and ingest security logs into the SIEM in order to optimize for performance of the SIEM.
Conduct designing, implementing, and testing of various SIEM solutions. (CDRL A007)
Create and support the creation of SIEM Use Cases and understand what alerts and log enrichment is necessary to meet the required acceptable false positive rate. (CDRL A008)
Create, test, and validate filters and rules. (CDRL A007)
Build and implement event correlation rules, logic, and content in the SIEM. (CDRL A007)
Tune SIEM event correlation rules and logic to filter out security events associated with known and well established network behavior, known false positives and/or known errors.
Analyze malware threats to develop behavior based detections that alert and/or prevent malicious activity.
Automate tasks in the SIEM using a common programming or scripting language.
Create scheduled and ad-hoc reporting with SEIM tools. (CDRL A007 and A008)
Create and maintain SIEM documentation. (CDRL A008)
Develop and execute a process to review and maintain SIEM resources such as rules, filters, lists, trends and reports.
Utilize SIEM to develop metrics collection, analysis, and create reports upon request.
Provide training to government personnel as requested.
Provide knowledge transfer of tools, processes and procedures to government personnel as requested.
Provide OJT to other contractor employees, military, and/or civilian personnel, and ensure continuity folders/working aids are updated at least once per quarter in order to ensure efficient transition when personnel rotate.
Maintain currency on latest industry trends and provide operational reports/assessments for development of tactics, techniques, and procedures. (CDRL A002)
Create, document, and report metrics for analysis to improve weapon system processes and mission execution. (CDRL A009).
Support operational leaderships tasking as it relates to Content Development functions and responsibilities

What You Bring:

Requirements:

DoDD 8570.01-M/8140.01 I AT Level III CND
Active TS/SCI
GMLE Certification (GIAC Machine Learning Engineer) OR Degree in Computer Science
More than 5 years of SIEM technology such as ArcSight, Splunk, and/or ELK.
More than 3 years with network traffic analysis, ports, and protocols. BA/BS or MA/MS

More than five (5) years of SIEM technology such as Arcsight, Splunk and/or ELK. Including, but not limited to, log handling, reports, filters, rule creation.
Extensive knowledge with IDS/IPS systems currently in use by the Department of Defense (DoD), Services, and Agencies (i.e., Air Force, Navy, Army, DC3, DISA).
More than three (3) years of experience with Network Traffic Analysis; ports and protocols. SANS GCDA or equivalent certification(s).
Extensive knowledge of MITRE ATT&CK framework, and its uses within the cybersecurity community (e.g., Open Source projects)

Desired:

Additionally, more than one (1) year of experience with Security, Orchestration, Automation, and Response (SOAR) platforms such as Phantom and/or Demisto. Proficient in Python and PowerShell.

What We Offer:

STS Systems Defense, LLC offers a competitive benefits package to include: paid holidays, paid time off including sick and vacation leave, medical, dental and vision insurance, flexible spending accounts, short and long term disability, company paid life insurance, 401(k) with a company match and discretionary profit sharing and tuition reimbursement.

SSD is an Equal Opportunity Employer. Employment decisions are made without regard to any protected category. Hiring preference will be given to BBNC shareholders, their spouses and descendants and Alaska Natives in accordance with Public Law 93-638.

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.

Dice Id: 10273070
Position Id: 1d66632f0b21167a4ea4f8ec7cfae2b5
Posted 30+ days ago

Fitment

Dice Job Match Score™

🔢 Crunching numbers...

Create job alert

Never miss an opportunity! Create an alert based on the job you applied for.

Similar Jobs

Cyber Data Engineer

San Antonio, Texas

•

Today

STS Systems Defense, LLC (SSD) is a government consulting and contracting firm supporting federal agencies and military installations across the U.S. is seeking a Cyber Data Engineer to support our ongoing mission at Lackland AFB in San Antonio, TX. What You'll Do: Write and develop scripts to automate the system installation of required patches and configurations to remediated identified system vulnerabilities.Perform coding and development as required to augment default SIEM functionality a

Full-time

SIEM Engineer

Hybrid in Austin, Texas

•

7d ago

SIEM Engineer Salary: $150k-$160k + bonus Location: Chicago, IL or Austin, TX Hybrid: 3 days onsite, 2 days remote *We are unable to provide sponsorship for this role* Qualifications Bachelor s degree 3 5 years in IT or engineering 2 3 years focused on SIEM, logging, or security analytics. Hands-on experience working with SIEM platforms such as Google SecOps (Chronicle), Splunk, Exabeam, or Microsoft Sentinel. Experience working with Cribl, including pipeline configuration and log onboardin

Easy Apply

Full-time

$150,000 - $160,000

SIEM Engineer - Cribl

Hybrid in Austin, Texas

•

3d ago

NO SPONSORSHIP - NO OPT SIEM Engineer II SALARY: $149k - $166l plus discretionary bonus LOCATION: AUSTIN, TX Looking for a security engineer with 3+ years SIEM logging security analytics. SIEM google SecOps chronicle splunk exabeam or Microsoft sentinel cribl exposure apis sys log or agents experience building dashboards scripting spl kql python regex aws azure Google Cloud Platform cloud As a SIEM Engineer II, you will play a key role in the implementation, optimization, and day-to-day managem

Easy Apply

Full-time

$149,000 - $166,000

Senior SIEM Engineer - USA Remote

Remote

•

Today

Bring more to life. At Danaher, our work saves lives. And each of us plays a part. Fueled by our culture of continuous improvement, we turn ideas into impact - innovating at the speed of life. Our 60,000+ associates work across the globe at more than 15 unique businesses within life sciences, diagnostics, and biotechnology. Are you ready to accelerate your potential and make a real difference? At Danaher, you can build an incredible career at a leading science and technology company, where we're

Full-time

USD 155,000.00 - 175,000.00 per year

Job Details

Skills

Security Controls
Dashboard
Testing
Use Cases
Malware Analysis
Scripting Language
Ad Hoc Reporting
SEIM
Documentation
Training
Knowledge Transfer
Military
Reporting
Content Development
Machine Learning (ML)
Computer Science
Business Analytics
Business Analysis
Mergers and Acquisitions
SIEM
ArcSight
Splunk
IDS
IPS
DoD
Adobe AIR
Network
SANS
Cyber Security
Open Source
Orchestration
Python
Windows PowerShell
STS
Insurance
Life Insurance
SSD
Recruiting
Law

Security Controls
Dashboard
Testing
Use Cases
Malware Analysis
Scripting Language
Ad Hoc Reporting
SEIM
Documentation
Training
Knowledge Transfer
Military
Reporting
Content Development
Machine Learning (ML)
Computer Science
Business Analytics
Business Analysis
Mergers and Acquisitions
SIEM
ArcSight
Splunk
IDS
IPS
DoD
Adobe AIR
Network
SANS
Cyber Security
Open Source
Orchestration
Python
Windows PowerShell
STS
Insurance
Life Insurance
SSD
Recruiting
Law

Summary

Analyze DCO events.
Apply current industry SIEM best-practices.
Use security alerts correlated with log enrichment data to enhance the operator's ability to identify real attacks.
Establish security control effectiveness and monitor for unauthorized outbound connections
Create detections by analyzing log data across the enterprise. (CDRL A007)
Develop dashboards and visualizations to identify adversarial activity. (CDRL A007)
Use log data to establish and implement virtual tripwires for early detection.
Analyze and ingest security logs into the SIEM in order to optimize for performance of the SIEM.
Conduct designing, implementing, and testing of various SIEM solutions. (CDRL A007)
Create and support the creation of SIEM Use Cases and understand what alerts and log enrichment is necessary to meet the required acceptable false positive rate. (CDRL A008)
Create, test, and validate filters and rules. (CDRL A007)
Build and implement event correlation rules, logic, and content in the SIEM. (CDRL A007)
Tune SIEM event correlation rules and logic to filter out security events associated with known and well established network behavior, known false positives and/or known errors.
Analyze malware threats to develop behavior based detections that alert and/or prevent malicious activity.
Automate tasks in the SIEM using a common programming or scripting language.
Create scheduled and ad-hoc reporting with SEIM tools. (CDRL A007 and A008)
Create and maintain SIEM documentation. (CDRL A008)
Develop and execute a process to review and maintain SIEM resources such as rules, filters, lists, trends and reports.
Utilize SIEM to develop metrics collection, analysis, and create reports upon request.
Provide training to government personnel as requested.
Provide knowledge transfer of tools, processes and procedures to government personnel as requested.
Provide OJT to other contractor employees, military, and/or civilian personnel, and ensure continuity folders/working aids are updated at least once per quarter in order to ensure efficient transition when personnel rotate.
Maintain currency on latest industry trends and provide operational reports/assessments for development of tactics, techniques, and procedures. (CDRL A002)
Create, document, and report metrics for analysis to improve weapon system processes and mission execution. (CDRL A009).
Support operational leaderships tasking as it relates to Content Development functions and responsibilities

What You Bring:

Requirements:

DoDD 8570.01-M/8140.01 I AT Level III CND
Active TS/SCI
GMLE Certification (GIAC Machine Learning Engineer) OR Degree in Computer Science
More than 5 years of SIEM technology such as ArcSight, Splunk, and/or ELK.
More than 3 years with network traffic analysis, ports, and protocols. BA/BS or MA/MS

More than five (5) years of SIEM technology such as Arcsight, Splunk and/or ELK. Including, but not limited to, log handling, reports, filters, rule creation.
Extensive knowledge with IDS/IPS systems currently in use by the Department of Defense (DoD), Services, and Agencies (i.e., Air Force, Navy, Army, DC3, DISA).
More than three (3) years of experience with Network Traffic Analysis; ports and protocols. SANS GCDA or equivalent certification(s).
Extensive knowledge of MITRE ATT&CK framework, and its uses within the cybersecurity community (e.g., Open Source projects)

Desired:

Additionally, more than one (1) year of experience with Security, Orchestration, Automation, and Response (SOAR) platforms such as Phantom and/or Demisto. Proficient in Python and PowerShell.

Dice Id: 10273070
Position Id: 1d66632f0b21167a4ea4f8ec7cfae2b5
Posted 30+ days ago

Fitment

Dice Job Match Score™

🔢 Crunching numbers...

Create job alert

Never miss an opportunity! Create an alert based on the job you applied for.

Similar Jobs

Cyber Data Engineer

San Antonio, Texas

•

Today

Full-time

SIEM Engineer

Hybrid in Austin, Texas

•

7d ago

Easy Apply

Full-time

$150,000 - $160,000

SIEM Engineer - Cribl

Hybrid in Austin, Texas

•

3d ago

Easy Apply

Full-time

$149,000 - $166,000

Senior SIEM Engineer - USA Remote

Remote

•

Today

Full-time

USD 155,000.00 - 175,000.00 per year