Threat-Focused SIEM Content Developer

Markesman Group is seeking a seasoned cyber threat analyst to research and develop threat-detection use cases and SIEM content based on intel and IR feedback. You will analyze logs, review data feeds, and map content to MITRE ATT&CK while collaborating with SMEs.

This role requires 5+ years in IT, 3+ years with a SIEM in content development or IR, DoD Top Secret clearance, and readiness to work in a sensitive environment to defend enterprise networks.