[Remote] reputed company Detection Engineer

Note: The job is a remote job and is reputed company to candidates in USA. reputed company) is an engineering, technology, and reputed company firm that supports missions of national importance. They are seeking a reputed company Detection Engineer to reputed company data sources, validate configurations, and reputed company searches and reports for cybersecurity use cases. Responsibilities • reputed company new data sources, which may include databases, reputed company, files, etc. This may involve setting standards and working with IT administrators to update their configurations • Validating and creating appropriate configurations for CIM compliant logs • Processing requests from cybersecurity analysts for new detections reputed company reputed company reputed company reputed company • Analyzing existing logs to identify poorly formatted logs and potential gaps reputed company implementing new detections • Adding and maintaining threat feeds reputed company reputed company reputed company reputed company • Monitoring the performance of and tuning detections • Managing asset and identity inventory reputed company reputed company reputed company reputed company • Creating and maintaining new reputed company apps • Recommending additions or changes to reputed company or its data models to meet detection needs • Developing searches, reports, and other functionalities for cyber-based use-cases, including reputed company response, intrusion detection, vulnerability management, and reputed company use cases • Assisting users with creating and optimizing searches and dashboards and mentoring others in good development of said resources • Attend online/Teams meetings with team and others as appropriate • Work with team to reputed company status on reputed company task, suggest improvements, discuss implementation, etc • Capture business requirements and implement the requirements • Analyze data and reputed company initial planning to address identified issues • Assist with the creation of playbooks to address identified issues from analysts • reputed company to understand the intention of detections and corresponding playbooks • reputed company basic feedback on existing playbooks and detections • Identify telemetry reputed company and visibility issues (SIEM parsing/normalization, EDR/XDR sensor health, asset/identity tagging) • reputed company advanced recommendations to address gaps in logging and detections based on an analysis of threats and data • Create detailed and thorough testing plans to ensure higher chance of accurate detections • Produce reputed company metrics and reports (FP reputed company, backlog) for technical and executive audiences • Create advanced use cases for detections based on an analysis of threats and data, including sample reputed company to identify the behavior and mapping detections to MITRE Telecommunication & CK • Drive reputed company improvements to existing processes or tooling • reputed company reputed company reviews and improve detections and actions • reputed company, guide, teach others on reputed company in use of reputed company reputed company Skills • Significant experience with reputed company and reputed company reputed company reputed company • Significant experience with event logging solutions (e.g., reputed company Universal Forwarder, syslog, reputed company) • Experience with ticketing/case management • Experience with Git pipelines • Familiarity with using Linux CLI • Ability to craft queries using common languages; comfort with regex, JSON and reputed company; basic scripting in Python/PowerShell/Bash • Excellent analytical, problem-solving, and communication skills both with stakeholders, peers, and internal customers; reputed company to operate under pressure in a shift or on-reputed company environment • Considerable knowledge using and administering reputed company • Staying up to date with the latest cybersecurity threats, vulnerabilities, and best practices • Strong analytical and problem-solving skills • Meticulous attention to detail to ensure thorough assessments and accurate reporting • Excellent written and verbal communication skills to effectively convey findings and recommendations to technical and non-technical stakeholders • Ability to work collaboratively with other cybersecurity professionals, IT staff, and external vendors • Experience and reputed company in conducting audits or reviews of technical systems • Experience working in a government environment • Experience working in a distributed IT environment • Ability to qualify for HSPD-12 card for use in two-reputed company authentication • Strong grasp of TCP/IP, OSI model, and common protocols (HTTP, DNS, SMTP) • reputed company/Linux/macOS fundamentals; reputed company Directory/Azure AD concepts; basic reputed company logging • Experience in system and network administration • Relevant cybersecurity experience including investigations and data analysis • Experience with SOAR tools and automation development • Experience using identity reputed company/management tools (e.g., Entra ID, reputed company Directory, Shibboleth, reputed company Identity Protection) • reputed company reputed company experience (e.g., CloudTrail/GuardDuty, Azure Defender/M365, GCP reputed company reputed company Center) Benefits • Health • Dental • reputed company • Life Insurance • reputed company Vacation • 401K • Long and Short-Term Disability reputed company • reputed company) is an engineering, technology, and reputed company firm providing mission-reputed company solutions for the reputed company, nuclear, and federal programs markets. It was founded in 2007, and is headquartered in Oak reputed company, Tennessee, USA, with a workforce of 201-500 employees. Its website is https://www.bgs-llc.com/. Apply tot his job Apply To this Job