SIEM Content Developer
Electrosoft Services Inc
$145,000 - $155,000 / year
Need a reasonable accommodation to apply or interview? Contact us.
JobMinglr uses automated technology to recommend jobs based on profile information and job preferences. Match Score does not determine eligibility for a position, prevent a user from viewing or applying to a job, or make hiring decisions on behalf of an employer.
Description
Electrosoft Services, LLC is an award-winning company that provides comprehensive technology-based solutions and services to federal customers. While cybersecurity is our specialty, we also focus on ICAM, Zero Trust, digital engineering and transformation, and enterprise AI and intelligent automation. We always seek to delight our customers, so we retain highly qualified employees and offer them meaningful work, growth opportunities, and work-life balance. What sets us apart from all other contractors is the sense of teamwork our employees feel – and the knowledge that outstanding effort is recognized and rewarded. The camaraderie we share emanates from Lunch & Learn sessions where we explore new ideas together, fun group activities ranging from escape rooms to miniature golf, and much, much more. If we’ve described you and your dream workplace, please apply and share in the many benefits and opportunities we offer.
SIEM Content Developer
Researches and develops new threat detection use cases based on emerging threats, threat intelligence research and Threat Detection Analyst feedback. Works with stakeholders and cybersecurity tool SMEs to identify gaps in security protection and analytics capabilities. Develops custom scripts to enhance SIEM functionality. Reviews the quality of data feeds and recommend and/or implement improvements. Collaborates with stakeholders to identify critical systems and application components to develop alerting priorities and create signatures tailored to individual programs and applications.
Minimum Requirements:
- Five (5) years of relevant IT experience
- Three (3) years working with a SIEM in a content development or Incident Response role.
- Three (3) years of System and/or Network Administration experience
- Understanding of various log formats
- Understanding of the MITRE ATT&CK framework
- Strong understanding of network architecture
- Experience developing and maintaining scripts (preferably using Powershell, Python or SPL)
- Understanding of Defense-in-Depth
- Must possess a current DOD Top Secret Clearance and be eligible for an IT-I Critical Sensitive security clearance or Tier 5 (T5) at time of proposal submission.
The actual base salary offered will be determined based on a variety of factors, including, but not limited to, the candidate’s relevant years and depth of experience, skills and qualifications, education, certifications, internal equity, and the specific requirements of the position. Candidates should not assume they will be offered the top of the posted range, as compensation is based on the individual qualifications and overall fit for the role.
Electrosoft is an Equal Opportunity Employer/Veterans/Disabled
Benefits
- stock options
About this role
Electrosoft Services is looking for someone to build and refine the detection logic that powers their SIEM systems for federal cybersecurity operations. You'd research emerging threats and work from analyst feedback to develop new use cases, write custom scripts to extend SIEM capabilities, and collaborate with stakeholders to design alerts and signatures that match each program's specific needs. The role also involves assessing data quality and identifying gaps where current security tools fall short.
This position requires five years of IT experience overall, with at least three years specifically in SIEM content development or incident response and three years in system or network administration. You'll need solid grounding in log formats, the MITRE ATT&CK framework, network architecture, and scripting—ideally in PowerShell, Python, or SPL. A current DOD Top Secret clearance is required, along with eligibility for an IT-I Critical Sensitive or Tier 5 clearance. The role is based in Columbus, Ohio and requires in-office work.
This role's local market on JobMinglr
Pay for this role
$145,000 to $155,000 per year
That is the employer's posted range, and where you land in it is usually decided in one conversation. Before that conversation, run the numbers: analyze an offer for this role.
Before you apply, worth reading
How JobMinglr reads this job
Every listing here is scored against your profile before you apply: skills overlap, experience level, location and work arrangement, each weighted and explained. You see the score and the reasons, not just a list. How the matching works.