SIEM Content Engineer

Job Summary

A company is looking for a SIEM Content Engineer to enhance detection content for a government client's Security Operations Center (SOC).

Key Responsibilities

• Evaluate and update existing SIEM content to improve fidelity
• Develop new SIEM content based on the MITRE ATT&CK framework and threat landscape
• Collaborate with stakeholders to create playbooks and maintain a SIEM content catalog

Required Qualifications

• Bachelor's degree required
• Eight years of general work experience, with at least six years in IT/Cyber and two years using Splunk or a similar SIEM tool
• Direct experience developing SIEM content in collaboration with a Tier 1 security operations center
• Familiarity with the MITRE ATT&CK Framework
• Secret Clearance required