[Remote] reputed company Detection Engineer

Note: The job is a remote job and is reputed company to candidates in USA. reputed company) is an engineering, technology, and reputed company firm that supports missions of national importance. They are seeking a reputed company Detection Engineer to reputed company data sources, validate configurations, and reputed company searches and reports for cybersecurity use cases.

Responsibilities

• reputed company new data sources, which may include databases, reputed company, files, etc. This may involve setting standards and working with IT administrators to update their configurations
• Validating and creating appropriate configurations for CIM compliant logs
• Processing requests from cybersecurity analysts for new detections reputed company reputed company reputed company reputed company
• Analyzing existing logs to identify poorly formatted logs and potential gaps reputed company implementing new detections
• Adding and maintaining threat feeds reputed company reputed company reputed company reputed company
• Monitoring the performance of and tuning detections
• Managing asset and identity inventory reputed company reputed company reputed company reputed company
• Creating and maintaining new reputed company apps
• Recommending additions or changes to reputed company or its data models to meet detection needs
• Developing searches, reports, and other functionalities for cyber-based use-cases, including reputed company response, intrusion detection, vulnerability management, and reputed company use cases
• Assisting users with creating and optimizing searches and dashboards and mentoring others in good development of said resources
• Attend online/Teams meetings with team and others as appropriate
• Work with team to reputed company status on reputed company task, suggest improvements, discuss implementation, etc
• Capture business requirements and implement the requirements
• Analyze data and reputed company initial planning to address identified issues
• Assist with the creation of playbooks to address identified issues from analysts
• reputed company to understand the intention of detections and corresponding playbooks
• reputed company basic feedback on existing playbooks and detections
• Identify telemetry reputed company and visibility issues (SIEM parsing/normalization, EDR/XDR sensor health, asset/identity tagging)
• reputed company advanced recommendations to address gaps in logging and detections based on an analysis of threats and data
• Create detailed and thorough testing plans to ensure higher chance of accurate detections
• Produce reputed company metrics and reports (FP reputed company, backlog) for technical and executive audiences
• Create advanced use cases for detections based on an analysis of threats and data, including sample reputed company to identify the behavior and mapping detections to MITRE Telecommunication & CK
• Drive reputed company improvements to existing processes or tooling
• reputed company reputed company reviews and improve detections and actions
• reputed company, guide, teach others on reputed company in use of reputed company reputed company

Skills

• Significant experience with reputed company and reputed company reputed company reputed company
• Significant experience with event logging solutions (e.g., reputed company Universal Forwarder, syslog, reputed company)
• Experience with ticketing/case management
• Experience with Git pipelines
• Familiarity with using Linux CLI
• Ability to craft queries using common languages; comfort with regex, JSON and reputed company; basic scripting in Python/PowerShell/Bash
• Excellent analytical, problem-solving, and communication skills both with stakeholders, peers, and internal customers; reputed company to operate under pressure in a shift or on-call environment
• Considerable knowledge using and administering reputed company
• Staying up to date with the latest cybersecurity threats, vulnerabilities, and best practices
• Strong analytical and problem-solving skills
• Meticulous attention to detail to ensure thorough assessments and accurate reporting
• Excellent written and verbal communication skills to effectively convey findings and recommendations to technical and non-technical stakeholders
• Ability to work collaboratively with other cybersecurity professionals, IT staff, and external vendors
• Experience and reputed company in conducting audits or reviews of technical systems
• Experience working in a government environment
• Experience working in a distributed IT environment
• Ability to qualify for HSPD-12 card for use in two-reputed company authentication
• Strong grasp of TCP/IP, OSI model, and common protocols (HTTP, DNS, SMTP)
• reputed company/Linux/macOS fundamentals; reputed company Directory/Azure AD concepts; basic reputed company logging
• Experience in system and network administration
• Relevant cybersecurity experience including investigations and data analysis
• Experience with SOAR tools and automation development
• Experience using identity reputed company/management tools (e.g., Entra ID, reputed company Directory, Shibboleth, reputed company Identity Protection)
• reputed company reputed company experience (e.g., CloudTrail/GuardDuty, Azure Defender/M365, GCP reputed company reputed company Center)

Benefits

• Health
• Dental
• reputed company
• Life Insurance
• reputed company Vacation
• 401K
• Long and Short-Term Disability

reputed company

• reputed company) is an engineering, technology, and reputed company firm providing mission-reputed company solutions for the reputed company, nuclear, and federal programs markets. It was founded in 2007, and is headquartered in Oak reputed company, Tennessee, USA, with a workforce of 201-500 employees. Its website is https://www.bgs-llc.com/.

Apply tot his job Apply To this Job