Security Content Engineer-2
Quincy, Massachusetts, United States
USD 120K-217K Mid-level Full Time
Tasks
- Align detection strategy with threat model and MITRE ATT and CK
- Collaborate with purple team to validate threat detection goals
- Determine detection content approach and avoid duplication
- Develop detection content for cloud and on prem systems
- Document and maintain scripts and processes for SIEM EDR rule testing
- Monitor and maintain SIEM lookup tables
- Monitor content metrics and improve fidelity and efficiency
- Partner to maintain IT processes naming conventions and assets
- Provide guidance for alert creation across security controls
- Test and tune threat detection use cases in SIEM and EDR
- Triage and prioritize detection content corrections and enhancements
- Validate and document detection requirements and test cases
Perks/Benefits
Skills/Tech-stack
Agile | Cyber Threat | Cyber Threat Intelligence | Cybersecurity | EDR | Incident Response | MITRE ATT&CK | Perl | Powershell | Python | Regular Expressions | SIEM | Scripting | Threat Intelligence | Threat detection | Threat hunting
Education
Bachelor of Engineering | Bachelor of Science | Bachelor of Science in Computer Science | Bachelor of Science in Cyber-Security | Bachelor of Science in Information Technology
Roles
Content Engineer | Engineer | Security | Security Content Engineer
Regions
Countries
States
Cities
Related jobs
-
Manager Security Operations USD 110K-125KAnalytics | Brand Protection | Business Continuity | Case management | ComplianceMid-level Full TimeEl Segundo, CALIFORNIA, United States7h ago
-
Sr. SOC Security Engineer II USD 125K-140KAWS | Automation | Azure | CIS Controls | Cause analysis401k match | Dental insurance | Educational assistance | Flexible work schedule | Health insuranceSenior-level Full TimeWashington DC R12h ago
-
800-53 | Authorization to Operate | CASP | CISM | CISSPDay shift | Extended hoursSenior-level Full TimeLackland AFB, TX12h ago
-
Security Engineer - Incident Response USD 146K-194KAPI Security | Application Firewall | Application Security Testing | Burp Suite | Code reviewHybrid work | Part time remote possible | Telecommuting possibleMid-level Full TimeUnited States14h ago
-
Mid-level Full TimeMinneapolis, MN, United States15h ago
-
Senior-level Full TimeMinneapolis, MN, United States15h ago
-
Security Engineering Manager USD 170K-200KAutomation workflows | CIS Critical Security Controls | Cloud Security | Critical Security Controls | Cybersecurity FrameworkOn-call support | Remote workMid-level Full TimeWork from home, VA, United States R15h ago
-
Security Analyst USD 70K-80KDatabase Administration | Incident Response | Information security | Malware analysis | Network Security401k | Accident insurance | Critical illness insurance | Daycare FSA | Dental insuranceMid-level Full TimeTallahassee, Orlando, Jacksonville, Miami and Tampa16h ago
-
Staff Security Engineer, PKI & Secrets USD 188K-275KCert-Manager | Certificate Lifecycle Management | Certificate lifecycle | Certificate revocation | Digital signatures401 K Employer Match | Company paid life insurance | Flexible PTO | Flexible spending account | Health savings accountSenior-level Full TimeLivingston, NJ / New York, NY …17h ago
-
Security Engineer USD 150K-250KAccess Management | CI/CD | Configuration Management | Identity and Access Management | Identity and accessCompetitive benefits package | Discretionary performance bonusSenior-level Full TimeNew York, NY, United States17h ago
-
Senior-level Full TimeAnnapolis Junction, United States17h ago
-
Summer Internship - Security Engineering USD 50K-50KAWS | Access Control | Authentication | Azure | BashCollaborative team environment | Hands On Security Engineering Experience | Remote-first cultureEntry-level InternshipRemote, United States R17h ago
-
Automation platforms | Bash | Cortex XSOAR | Incident Response | JSONOnsite as neededSenior-level ContractColumbia, United States18h ago
-
DCO Engineer (TS/SCI Clearance) USD 88K-147KAWS | Agile frameworks | Automation and response | Ceph | ContainerizationMid-level Full TimeColorado Springs, Colorado, United States19h ago
-
Network Engineer, Operations & Support USD 110K-125KAI Automation | After Action Reviews | Alerting | Analytics | BGPTravel opportunitySenior-level Full TimeDenver, CO | Houston, TX20h ago
-
CTI Methodologies | Cyber Threat | Cyber Threat Intelligence | Enterprise antivirus | FirewallsSenior-level Full TimeCalifornia, USA20h ago
-
Linux System Administrator USD 100K-110KAPI Management | Ansible | Ansible Automation | Ansible Automation Platform | ArgoCDOn-call rotation | Rotational Friday shifts | Standby supportMid-level Full TimeCenter, Center District, IL21h ago
-
Network Security and Firewall Engineer - City USD 86K-132KAccess Control | Access Control Lists | Detection and prevention | Event management | Firewall administrationSenior-level Full TimeOklahoma City, OK, United States1d ago
-
Staff Software Engineer - Data Query USD 191K-224KAgile | Automated testing | Big Data | C++ | Data StructuresSenior-level Full TimeUnited States, Remote R1d ago
-
Director, Splunk Platform Engineering & SRE USD 147K-310KAnsible | Data Ingestion | Disaster Recovery | Distributed Systems | Error BudgetsFlexible global resources and tools | Paid leave | Paid volunteer time | Wellbeing programsExecutive-level Full TimeNew York, NY, United States1d ago
-
Information Security Officer USD 148K-200KAPI Security | AWS | AWS Config | AWS Well Architected | AWS Well-Architected Security PillarPeriodic travel | Remote workSenior-level Full TimeRemote (United States); Canada R1d ago
-
ArcGIS Pro | Arcpy | Bokeh | Dash | GDAL401k | Dental insurance | Health insurance | Vision insuranceSenior-level Full TimeFayetteville, North Carolina, United States1d ago
-
ArcGIS Pro | Arcpy | Bokeh | Dash | GDAL401k | Dental insurance | Health insurance | TS/SCI clearance | Vision insuranceSenior-level Full TimeSneads Ferry, North Carolina, United States1d ago
-
Senior DevSecOps Engineer USD 150K-180KAWS | Admission control | Alert triage | CI/CD | CJIS401k | Accident insurance | Additional life insurance | Central Time Zone availability | Employer-paid disability insuranceSenior-level Full TimeChicago, IL, US R1d ago
-
Principal Threat Detection Engineer - Blue Team USD 144K-288KAdversary Emulation | Bash | Cribl | CrowdStrike | Defender for EndpointSenior-level Full TimeNew York-161 Ave of the Americas, …1d ago