- Lackland, Texas, United States
- On-site
- Full-time · Mid
- 3+ years
Implements use cases based on mission requirements that provide analysts with a manageable SIEM view of security incidents, complete with workflow and reporting.
Responsibilities
- Analyze DCO events
- Apply current industry SIEM best-practices
- Use security alerts correlated with log enrichment data to enhance the operator’s ability to identify real attacks
- Establish security control effectiveness and monitor for unauthorized outbound connections
- Create detections by analyzing log data across the enterprise
Requirements
- BS in Computer Science
- MS in Computer Science/Cyber Security
- Nice to have: Arcsight
- Nice to have: Splunk
- Nice to have: Devo