Cyber Threat Detection Engineer, SIEM and Signature Development

Job overview

The Cyber Threat Detection Engineer, SIEM and Signature Development role is onsite in St. Louis, MO. The salary range is $78,000–$86,000 per year. RISA supports federal defense and intelligence cybersecurity missions, and this role protects an Intelligence Community customer’s enterprise. The engineer develops and validates defensive detection logic to identify and disrupt adversary activity. Working with cyber analytics and incident response teams, the role turns intelligence and incident reporting into tuned rules, signatures, and scripts and supports live incident analysis.

What you'll do

• Analyze trends and patterns to identify potential events and develop or tune rules, signatures, and scripts
• translate intelligence and incident reporting into detection logic
• conduct Purple Team exercises and validate deployed countermeasures
• work with Cyber Data Analytics on SIEM alert efficiency and false positives
• support the Cyber Incident Response Team during live activity
• document analysis in the authorized ticketing system.

What we're looking for

Skills & competencies

full-time

cyber threat detection engineer

siem

signature development

cybersecurity analytics

threat detection

purple team

ts/sci clearance

st. louis mo

risa

$78k–$86k

medical dental vision

401(k)

paid time off

11 federal holidays

Work arrangement

• Weekend coverage required

Benefits & perks

• Medical, dental, and vision insurance
• 401(k) and Roth options
• paid time off
• and 11 paid federal holidays.

Why this role

Requires active TS/SCI clearance and U.S. citizenship; must be able to obtain and maintain a government polygraph after hire. Travel is stated as none.

About the employer

RISA is hiring for this role. Industry: Engineering Services. Sector: 54.