Search for Cyber Content Developer roles in San Antonio, Texas, requiring TS/SCI clearance, at full-time positions, with a focus on SIEM technology, and needing knowledge of Python.

Okay, I've searched for Cyber Content Developer roles in San Antonio, Texas, requiring a TS/SCI clearance, at full-time positions, focusing on SIEM technology, and requiring knowledge of Python. I found 27 relevant positions for you to review.

Cyber Content Developer

San Antonio, TX

Senior

Full-time

Python

Can you help me to analyze the job description and company culture?

Sure. Here's the analysis:

Job Analysis:

The Cyber Content Developer/SIEM Engineer role at IPSecure focuses on implementing and maintaining SIEM use cases aligned with mission requirements. This role aims to enhance the monitoring of security incidents by utilizing industry best practices and providing a streamlined SIEM view for analysts. Key responsibilities include developing detection mechanisms and logs ingestion, creating visualizations of adversarial activity, and establishing effective security control measures. This position demands a proactive approach, as the engineer will regularly analyze DCO events and refine the SIEM's performance through tuning event correlation rules and logic. Candidates should anticipate challenges in ensuring low false positive rates while developing alerts and accurately analyzing log data for emerging threats. Success in this role will be marked by effective communication and collaboration with leadership, alongside a tangible reduction in response times to security incidents.

Company Analysis:

IPSecure operates within the critical and rapidly evolving field of Cyber Security services, catering to both government and commercial sectors. As an 8(a) small disadvantaged business, IPSecure's commitment to offering unmatched customer service and leveraging its expertise suggests a culture that prioritizes innovation, adaptability, and client satisfaction. This implies a dynamic and possibly fast-paced work environment where employees are encouraged to actively engage with changing technologies and emerging threats. The role of Cyber Content Developer/SIEM Engineer is positioned to impact the organization significantly due to the increasing demand for robust security measures in a digital landscape fraught with vulnerabilities. This position likely involves close collaboration across teams, leading to greater organizational influence and visibility with leadership. The role's alignment with IPSecure's growth strategy is evident, as it seeks to fortify cyber defense capabilities that align with the company's mission of ensuring clients stay safe, secure, and operational 24/7.

Mock up some interview questions based on the job description.

Absolutely. Here are some mock interview questions that could come up:

Tell me about a time when you had to analyze Security Information and Event Management (SIEM) data to identify a security incident. What was your approach and the outcome?
Describe a challenging project involving the creation of SIEM use cases that you worked on. What were the key elements you focused on to ensure its success?
How do you keep yourself updated with the latest trends and best practices in cybersecurity, particularly with SIEM technologies?
What strategies do you use to effectively collaborate with cross-functional teams to align security initiatives with organizational priorities?
How would you approach the task of tuning event correlation rules in a SIEM to reduce false positives while maintaining security efficacy?
Given a scenario where your SIEM system is generating too many alerts, how would you prioritize and filter the most critical alarms?
Imagine you are tasked with developing a new detection mechanism for a specific malware threat. What steps would you take to analyze and document this within the SIEM?
Your team is facing challenges with existing SIEM performance. What immediate actions would you take to optimize its function and enhance monitoring capabilities?
Why are you interested specifically in the Cyber Content Developer position at IPSecure, and how do you feel your past experiences align with our mission?
What aspects of IPSecure's approach to customer service in cybersecurity resonate most with you, and how would this influence your work?
What is your understanding of the MITRE ATT&CK framework, and how would you apply it within your role at IPSecure?
Considering IPSecure's focus on 24/7 security solutions, how would you manage your workload to ensure all critical tasks are completed timely?
What questions do you have about the team you would be working with and how they collaborate on cybersecurity projects?
How do you see the role of Cyber Content Developer impacting the broader goals of IPSecure?
What tools and methodologies do you believe are essential for success in a SIEM engineering role, and why?

Job Details

Overview Company

Cyber Content Developer/SIEM Engineer

IPSecure, Inc

a month ago

Highlight

OnsiteFull-time2+ yearsEntry

Summary

IPSecure, Inc is seeking a Cyber Content Developer/SIEM Engineer to join their team in Lackland Heights, Texas. The role involves implementing use cases based on mission requirements to provide analysts with a manageable SIEM view of security incidents.

About the Role

As a Cyber Content Developer/SIEM Engineer, you will analyze DCO events, apply SIEM best practices, and use security alerts to enhance attack identification. You will create detections, develop dashboards, and implement virtual tripwires. Responsibilities include designing, implementing, and testing SIEM solutions, creating use cases, and automating tasks using programming languages.

About You

Required:

An active TS/SCI clearance.
Ability to obtain the GIAC Certified Forensic Analyst (GCFA) Certification within 120 days of hire or have a BS/MS in Computer Science or Cyber Security.

Preferred:

2+ years of SIEM technology experience (e.g., Arcsight, Splunk, Devo, ELK).
Experience with log handling, reports, filters, and rule creation.
Extensive knowledge of IDS/IPS systems used by the DoD.
3+ years of experience with Network Traffic Analysis.
SANS GCDA or equivalent certification(s).
Extensive knowledge of the MITRE ATT&CK framework.
1+ year of experience with SOAR platforms such as Phantom or Demisto.
Proficient in Python and PowerShell.

Benefits

Medical, Dental, Vision
Unlimited Vacation
Sick Leave
Paid Federal Holidays
Education and Certification Reimbursement Program
401(k) retirement plan with safe harbor employer match after 3 months
Prepaid legal plan and ID protection plan available
Accident Insurance
Critical Illness Insurance
Hospital Indemnity Insurance

IPSecure, Inc

IPSecure provides Cyber Security Solutions to the Government and Commercial companies worldwide. We take pride in having the experience, dedication, and resources necessary to offer our clients a broad of services. The level of expertise we have at IPSecure is rarely found in a company of our size which allows us to offer unmatched customer service and solution design regardless of your company size or need. Our main concern is that your enterprise is safe, secure and operational 24/7.

IPSecure is an 8(a), small disadvantaged business which provides a broad range of Information Technology (IT) services to the Government and private sector companies globally.

CAPABILITIES • Information Assurance • Risk Management Framework • Policy Development • Telecommunications Security • Voice and Video over IP (VVoIP) Security • Cryptologic Vulnerability Testing • OS Vulnerability Testing and Hardening • Software Development • Network Security/Defensive Cyber Operations • Host Based Security • Red/Blue Field Assessments • Database Design & Administration • JITC Certified InterOperability Testing • Engineering • Network Design • Real-Time Service Testing • IPv6 Testing • Public Key Encryption • SSL Decryption • Web Design & Administration

COMPANY HISTORY Founded in 2000 in San Antonio, Texas, IPSecure originally ventured into the world of software development. The company soon evolved to include Telecommunication and Cyber Security with the goal to provide aggressive Information Assurance and Cyber Security support to all of our customers. Through many years of success, our company has grown to include Cyber network attack/defense/exploitation of government and commercial networks while continuing to provide unsurpassed customer service to our clients.

San Antonio, TX