Job#: 2039299
Job Description:
Title: Content Developer
Location: 100% onsite at Lackland Air Force Base - San Antonio, TX
Schedule: Monday through Friday 8am-5pm
Job Type: 12 month contract to hire
Openings: 2
Certification/Minimum Requirements:
- 3+ years of relevant work experience
- At minimum, Bachelors degree in relevant field
- Active TS/SCI clearance
- Certifications Requirements: One of the following IAT Level III 8140 Certification (CISA, GSE, SCNA, CISSP, or GCIH)
- You must have either have the GIAC Certified Forensics Analyst (GCFA) or GIAC Certified Detection Analyst (GCDA) certification or able to acquire within 120 days of onboarding
Overview:
- Implements use cases based on mission requirements that provide Analysts with a manageable SIEM view of security incidents, complete with workflow and reporting.
- Analyzes DCO events and applies current industry SIEM best practices.
- Uses security alerts correlated with log enrichment data to enhance the operator's ability to identify real attacks.
- Creates detections by analyzing log data across the enterprise.
- Develops dashboards and visualizations to identify adversarial activity.
- Analyzes and ingests security logs into the SIEM in order to optimize for performance of the SIEM.
- Conducts designing, implementing, and testing of various SIEM solutions.
Required Experience:
- More than five (5) years of SIEM technology such as ArcSight, Splunk, and/or ELK. Including, but not limited to, log handling, reports, filters, rule creation.
- Extensive knowledge with IDS/IPS systems currently in use by the Department of Defense (DoD), Services, and Agencies (i.e., Air Force, Navy, Army, DC3, DISA).
- More than three (3) years of experience with Network Traffic Analysis; ports and protocols.
- SANS GCDA or equivalent certification(s).
- Extensive knowledge of MITRE ATT&CK framework, and its uses within the cybersecurity community (e.g., Open?Source projects).
Desired:
- Additionally, more than one (1) year of experience with Security, Orchestration, Automation, and Response (SOAR) platforms such as Phantom and/or Demisto.
- Proficient in Python and PowerShell.
EEO Employer
Apex Systems is an equal opportunity employer. We do not discriminate or allow discrimination on the basis of race, color, religion, creed, sex (including pregnancy, childbirth, breastfeeding, or related medical conditions), age, sexual orientation, gender identity, national origin, ancestry, citizenship, genetic information, registered domestic partner status, marital status, disability, status as a crime victim, protected veteran status, political affiliation, union membership, or any other characteristic protected by law. Apex will consider qualified applicants with criminal histories in a manner consistent with the requirements of applicable law. If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation in using our website for a search or application, please contact our Employee Services Department at [email protected] or 844-463-6178.
Apex Systems is a world-class IT services company that serves thousands of clients across the globe. When you join Apex, you become part of a team that values innovation, collaboration, and continuous learning. We offer quality career resources, training, certifications, development opportunities, and a comprehensive benefits package. Our commitment to excellence is reflected in many awards, including ClearlyRated's Best of Staffing in Talent Satisfaction in the United States and Great Place to Work in the United Kingdom and Mexico.
VEVRAA Federal ContractorWe request Priority Protected Veteran & Disabled Referrals for all of our locations within the state.We are an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any other protected characteristic. The EEO is the Law poster is available here.