Detection Engineer
USA MD (Virtual Office), Estados Unidos
Job Description:
Parsons is looking for an amazingly talented Detection Engineer to join our team!
What You'll Be Doing:
Develop and maintain detection rules using Sigma, Suricata, and YAML.
Analyze network traffic and PCAP files to create accurate detection signatures from hex values.
Identify and map field names within default data sources to ensure comprehensive detection coverage.
Train and support users in leveraging detection tools and methodologies effectively.
Collaborate with other cybersecurity professionals to enhance detection capabilities and improve overall security posture.
Conduct regular reviews and updates of detection rules to adapt to evolving threats.
Provide detailed documentation and reports on detection rule development and implementation.
What Required Skills You'll Bring:
Active Secret Security Clearance
Proven experience in developing Sigma rules and Suricata rules
Proficiency in writing host detection rules using YAML
Strong understanding of network protocols and the ability to analyze PCAP files
Experience in creating detection signatures from hex values
Ability to identify and map field names within default data sources
Excellent analytical and problem-solving skills
Strong written and verbal communication skills
Ability to work both independently and as part of a team
What Desired Skills You'll Bring:
Bachelor's degree in Computer Science, Information Security, or 6 years related experience
Relevant certifications such as CISSP, GCIH, GCIA, or similar
Experience with other detection and monitoring tools and platforms
Familiarity with threat intelligence and its application to detection engineering
Minimum Clearance Required to Start:
SecretThis position is part of our Federal Solutions team.Our Federal Solutions segment delivers resources to our US government customers that ensure the success of missions around the globe. Our employees drive the state of the art as they provide services and solutions in the areas of defense, security, intelligence, infrastructure, and environmental. We promote a culture of excellence and close-knit teams that take pride in delivering, protecting, and sustaining our nation's most critical assets, from Earth to cyberspace. Throughout the company, our people are anticipating what’s next to deliver the solutions our customers need now.Salary Range:
$104,200.00 - $182,400.00We value our employees and want our employees to take care of their overall wellbeing, which is why we offer best-in-class benefits such as medical, dental, vision, paid time off, 401(k), life insurance, flexible work schedules, and holidays to fit your busy lifestyle!This position will be posted for a minimum of 3 days and will continue to be posted for an average of 30 days until a qualified applicant is selected or the position has been cancelled.Parsons is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, veteran status or any other protected status.We truly invest and care about our employee’s wellbeing and provide endless growth opportunities as the sky is the limit, so aim for the stars! Imagine next and join the Parsons quest—APPLY TODAY! ApplyJob Profile
Active secret security clearance required MD Minimum clearance required Virtual Office
Benefits/Perks401(k) Best-in-class benefits Dental Flexible work schedules Holidays Life Insurance Medical Paid Time Off Vision
Tasks- Analyze network traffic
- Collaborate with cybersecurity professionals
- Conduct reviews of detection rules
- Develop detection rules
- Document detection rule development
- Train users
Analytical CISSP Communication Computer Science Cybersecurity Data Detection signatures Documentation Engineering Information security IT Network protocols Pcap analysis Problem-solving Security Security Clearance Sigma Suricata Teams Teamwork Threat Intelligence Verbal communication Writing YAML
Experience6 years
EducationBachelor Bachelor's Bachelor's degree Bachelor's degree in Computer Science Bachelor's degree in information security Computer Science Degree Engineering Related Experience
CertificationsActive Secret Security Clearance CISSP GCIA GCIH Secret Security Clearance
TimezonesAmerica/Anchorage America/Chicago America/Denver America/Los_Angeles America/New_York Pacific/Honolulu UTC-10 UTC-5 UTC-6 UTC-7 UTC-8 UTC-9