Cyber Detection Engineer

Cyber Detection Engineer

Location : Fairmont, WV

Clearance : Minimum fully adjudicated Secret and Interim Top Secret clearance

This program requires US Citizenship

The Cyber Detection Engineer will develop detections based on intelligence available, then research and assist in implementing new detection methods. This Detection Engineer will ensure that malicious activity will be detected within the environment. The DE is responsible for quality assurance of detections including filtering for potential false positives, mapping detections to MITRE ATT&CK framework, and specific campaigns / APTs when applicable. The Detection Engineer will work closely with other analysts to ensure detections are relevant to the current threat landscape. DE will work closely with the SIEM team to make recommendations for tuning and detection enhancements. The DE will evaluate the quality of data resulting from detections and ensure that the output of a detection leads to a meaningful investigation.

• Configure tools to detect atomic, computed or behavioral indicators based on generated tactical intelligence across SOC's detection sensors such as Logging Infrastructure (SIEM, Connector / Forwarder, Data Stream Processing, etc.), Security Sensors (NIDS / NIPS, EDR, Email Protection, etc.), or SOAR.
• Develop and implement detection feedback processes - e.g., tuning false positives, etc.
• Use machine learning and pattern analysis to improve detection of specific types of threats.

Qualifications :

Preferred Qualifications :

Position Details :

The above salary range represents the range expected for the position; however, final salary offers are based on a number of factors such as the position's responsibilities; the candidate's experience, education, and skills; location; travel required; and current market conditions.

Medical, Dental, and Vision offerings

ABBTECH is an EOE / Minorities / Women / Disabled Individuals / Veterans