Description

You will support the Cyber Development and Testing team in the end-to-end development of security use cases, including writing correlation searches, building dashboards, and executing testing procedures.

This role is on-site.

Responsibilities

• Develop new security use cases, reports, and dashboards using efficient correlation search queries.
• Design, implement, and execute testing procedures for new and existing security alerts.
• Assist the US Cyber Threat Detection Lead with the migration to a cloud-based SIEM tenant.
• Test existing and new use cases within cloud environments.
• Communicate status updates regarding weekly, monthly, and quarterly project deliverables.

Required Skills

• 5+ years of experience in information security.
• 3-4 years of experience in security log analysis.
• Developer-level proficiency with Splunk.
• Intermediate experience with AWS.
• Experience creating performant correlation search queries.
• Bachelor's degree.
• Ability to manage tasks within JIRA or similar agile platforms.

Preferred Skills

• Experience with AWS CloudTrail and GuardDuty.

Key Skills

Education

Bachelor's