Horizon Industries
Siem Content Developer
Columbus, OH · Full-time · Posted Oct 5, 2026
- Experience
- Five years of relevant IT experience; three years working with a SIEM in a content development or Incident Response role; three years of System and/or Network Administration experience.
- Visa sponsorship
- Must possess a Top Secret Clearance.
About the job
Develops SIEM threat-detection content and scripts, improves security analytics and data feeds, and creates program-specific alerting and signatures.
What you'll do
- Research and develop threat-detection use cases based on emerging threats, intelligence research, and analyst feedback.
- Work with stakeholders and cybersecurity tool SMEs to identify gaps in protection and analytics; review data-feed quality and recommend or implement improvements.
- Develop custom scripts and create alerting priorities and signatures tailored to programs and applications.
What they ask for
- Five years of relevant IT experience.
- Three years working with a SIEM in a content development or Incident Response role.
- Three years of System and/or Network Administration experience.
- Understanding of log formats, MITRE ATT&CK, network architecture, and Defense-in-Depth; experience developing and maintaining scripts.
Nice to have
- Preferably using Powershell, Python or SPL.
Tools
SIEM, MITRE ATT&CK, Powershell, Python, SPL
Model-written summary · the original posting is authoritative