careerplug
Cyber Security Engineer
SarelaTech
Columbus, USA
Full-time
Senior · 5+ years experience
Onsite
USD 90000-130000 yearly / year
Discovered 1 weeks ago
PowerShellPythonSPLKQLSplunk Enterprise Security
Free
Job Fit Check
Base Career helps you apply smarter for this job.
?%
Ready to ScanKey skills for this role
PowerShellPythonSPL
Key Skills for This Role
PowerShellPythonSPLKQLSplunk Enterprise Security
Full Job Posting
- 401(k)
- 401(k) matching
- Dental insurance
- Health insurance
- Paid time off
- Profit sharing
- Training & development
- Tuition assistance
- Vision insurance
- Research, develop, and implement new cybersecurity threat detection use cases based on emerging threats, threat intelligence, and Threat Detection Analyst recommendations.
- Design, develop, and maintain SIEM correlation rules, analytics, dashboards, and detection content to improve enterprise threat detection and monitoring capabilities.
- Develop and maintain automation scripts using PowerShell, Python or similar scripting languages to enhance SIEM functionality and streamline cybersecurity operations.
- Analyze log sources and data quality to identify gaps in visibility, improve event collection, and optimize enterprise cybersecurity monitoring.
- Collaborate with government stakeholders, cybersecurity tool SMEs, and operational teams to identify critical systems, prioritize monitoring requirements, and develop tailored detection signatures.
- Evaluate cybersecurity architectures, network traffic, and security telemetry to identify deficiencies in detection capabilities and recommend improvements.
- Support continuous improvement of cybersecurity monitoring capabilities by implementing detection methodologies aligned with the MITRE ATT&CK framework and Defense-in-Depth principles.
- Prepare technical documentation, implementation guides, operational procedures, and engineering recommendations supporting cybersecurity tool enhancements.
- Active DoD Top Secret security clearance with SCI eligibility and IT-I access.
- Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Computer Engineering, or related discipline, or equivalent experience.
- Minimum five (5) years of relevant Information Technology experience.
- Minimum three (3) years of experience working with a SIEM in a content development, threat detection, or Incident Response role.
- Minimum three (3) years of experience as a System Administrator and/or Network Administrator.
- Experience developing SIEM correlation rules, threat detection content, or cybersecurity analytics using SPL and KQL query languages.
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career