Detection Engineer Analyst Subject Matter Expert (SME)

Resource Management Concepts, Inc. (RMC) provides high-quality, professional services to government and commercial sectors. Our mission is to deliver exceptional management and technology solutions supporting the protection and preservation of the people and environment of the United States of America.

RMC is hiring a Detection Engineer Analyst Subject Matter Expert (SME) to support an active government contract in Quantico, Virginia, providing defensive cyberspace operations and Cyber Security Service Provider (CSSP) functions. This position will support the government's mission to deny, disrupt, and degrade adversaries’ abilities and attempts to disrupt, exploit and attack the information technology (IT) services provided to network users.

The selected applicant will perform a variety of activities including but not limited to:

Develop detection use cases based on current threats, the MITRE ATT&CK framework, and government direction.

Review incident reporting to tune related detection use cases as necessary.

Review Security information and event management (SIEM)/ Security orchestration, automation, and response (SOAR) incident queue for unnecessary events and alerts and implement corrective actions.

Identify gaps in logging and detection capabilities across attack surface.

Assist in implementing new log ingestion and verify proper parsing and normalization of data in SIEM/SOAR.

Create high fidelity correlation rules, signatures, filters, and automations and maintain low false-positive rate.