> Markdown version of [/jobs/ext/38672-content-developer-detection-engineer-dod-top-secret](https://www.wearedevelopers.com/jobs/ext/38672-content-developer-detection-engineer-dod-top-secret). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # CONTENT DEVELOPER / DETECTION ENGINEER / DOD TOP SECRET - **Company:** Peraton - **Location:** Wiesbaden, Germany - **Experience:** Experienced - **Salary:** €80,000.0 - €128,000.0 - **Contract:** Permanent contract - **Skills:** Systems Engineering, Microsoft Azure, Bash Shell, CompTIA Security+, Cyber Security, Information Systems, Elasticsearch, Intrusion Detection and Prevention, Intrusion Detection Systems, Python (Programming Language), Network Intrusion Detection Systems, Windows PowerShell, Comptia Pentest+ CE, ArcSight SIEM Tool, Security Information and Event Management, Systems Integration, Snort (Software), Scripting, Mitre Att&ck, Gitlab, Cybercrime, Cyber Warfare - **Published:** May 24, 2026 - **Apply:** https://de.indeed.com/viewjob?jk=6f44501cd0de22e3 ## About the Role Do you have experience in Systems engineering?, Do you have a Bachelor's degree?, * Bachelor's degree in a STEM field or Business Administration and a minimum of 3 years experience in Systems Engineering. * Must be able to qualify for Technical Expert Status Accreditation (TESA) by having a bachelor's degree in a STEM or Business field plus 3 years of specialized experience OR an Associate's degree plus 7 years of specialized experience. * Experience in developing dashboards and creating and maintaining Elasticsearch rules. * Experience with intrusion detection systems such as Snort, Suricata, and TippingPoint. * Active DoD Approved 8140 Certification in: + DCWF 521 Intermediate (B.S. in IT or one of the following: GMON, GRID, CEH, Cloud+, CySA+, GSEC,Security+, PenTest+, SSCP). + 8140 Residential Certification: Any one of the following: GDAT, GDSA, Elastic Certified, ArcSight ESM Advanced Analyst Certified Expert, Microsoft Certified: Cybersecurity Architect Expert, Azure DevOps Engineer Expert, TCM Security PNPT. * U.S. citizenship required. * An Active DoD Top Secret security clearance with SCI eligibility. Preferred: * Experience with one or more scripting languages: PowerShell, Bash, Python. * Experience working with Gitlab. * Familiarity with ATT&CK Navigator and the MITRE ATT&CK (Adversarial Tactics, Techniques, and Common Knowledge) matrices. ## Description Peraton is seeking a motivated Content Developer / Detection Engineer to join our team in support of the U.S. Army Regional Cyber Center - Europe (RCC-E) services program., * Create analytics with a SIEM to identify patterns, anomalies, and compromising indicators to alert Cyber Incident responders. * Create dashboards in the SIEM platform to tip analysts to malicious activities directed against the DoD information systems. * Create dashboards and report in the SIEM platform to assist network defenders in identifying issues and concerns. * Perform daily review of analytic performance on the SIEM identifying correlation engine slowdowns. * Evaluate intrusion detection sensor configurations for proper alert capability. * Evaluate intrusion detection signature for appropriateness to DoD networks and implement rules as required. * Contribute to the design, development and implementation of countermeasures, system integration, and tools specific to Cyber and Information Operations. * Assist in the integration of additional security platforms to correlate new data with HIDS and NIDS alerts. * Prepare and presents technical reports and briefings. * Write reports on capabilities of the defensive cyber operations to increase customer situational awareness and improve the customer's cyber security posture. * Write and update SOP and TTPs as required by the local customer. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Old tools, new tricks](https://www.wearedevelopers.com/videos/1916-old-tools-new-tricks) - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [WeAreDevelopers LIVE - Modern DevOps for IoT Devices and More](https://www.wearedevelopers.com/videos/1805-wearedevelopers-live-modern-devops-for-iot-devices-and-more) - [Reusing apps between teams and environments through Containers](https://www.wearedevelopers.com/videos/107-reusing-apps-between-teams-and-environments-through-containers) - [Enabling automated 1-click customer deployments with built-in quality and security](https://www.wearedevelopers.com/videos/83-enabling-automated-1-click-customer-deployments-with-built-in-quality-and-security) ## Related Articles - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline) - [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)