CSSP Cybersecurity Engineer

Prime contract role with the Defense Threat Reduction Agency (DTRA) supporting the CSSP program.

About the role

The DTRA CSSP Cybersecurity Engineer serves as the principal technical authority responsible for the design, deployment, sustainment, and optimization of the CSSP's security toolsets and infrastructure. This engineering role is critical for leading complex, enterprise-wide SIEM migrations, orchestrating the secure ingestion and normalization of diverse subscriber data sources, and executing rigorous patch management on underlying CSSP infrastructure. By bridging the gap between advanced systems engineering and CSSP compliance, this engineer ensures continuous operational readiness, high-fidelity security telemetry, and strict adherence to JFHQ-DoDIN defensive mandates.

Responsibilities

• Manage, configure, and optimize DTRA CSSP security toolsets to assist analysts in performing rapid initial triage and deep-dive alert investigations.
• Proactively engineer new technical solutions, develop dashboards to highlight critical network activity, and continuously monitor system utilization to prevent resource degradation.
• Design, propose, and implement configuration updates to existing CSSP infrastructure. Formally document all change proposals, draft technical drawings, and maintain precise records of system modifications to ensure strict alignment with organizational change control processes.
• Oversee the technical integration of new incoming subscribers into the central SIEM. Configure forwarders, APIs, and syslog collectors to securely ingest subscriber datasets, ensuring robust telemetry collection across all aligned networks.
• Execute SIEM migrations, develop parsing rules (regex), manage syslog aggregators, and map log ingestion frameworks to cybersecurity standards.
• Ensure all inbound subscriber log feeds are continuously validated, parsed, and normalized against the Splunk Common Information Model (CIM). Assist in the sustainment of machine learning solutions built on normalized datasets to improve defensive detection capabilities.
• Maintain host security for all Enterprise Security Linux systems within the CSSP. Apply routine vulnerability patches and enforce Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIG) to maintain a secure operating baseline.
• Partner closely with customer stakeholders, systems administrators, and leadership to validate engineering solutions. Create professional technical manuals, standard operating procedures, architectural network diagrams, training slide decks, and project reports.
• Implement cybersecurity engineering principles to meet Federal framework goals, validate complex technical solutions, and connect business, system, and data flows.

Requirements

• Minimum of 2 to 8 years of progressive work experience in cybersecurity systems engineering, systems administration, or defensive infrastructure support.
• Bachelor of Arts (BA) or Bachelor of Science (BS) degree from an accredited college or university.
• Active Top Secret security clearance with SCI eligibility.
• DoD 8570/8140 Compliance: IAT Level II.
• CSSP Infrastructure Support or equivalent certification.
• Demonstrated experience implementing cybersecurity engineering principles to meet Federal framework goals, providing high-level technical drawings, validating complex technical solutions, and connecting business, system, and data flows.

Benefits

• Health, dental, and vision insurance.
• 401K retirement plan.
• Life insurance.
• Short-term and long-term disability plans.
• Paid vacation time and holidays.

Pay

Target salary range: $120,000 – $170,000 per year.

Schedule

• Work schedule: 8:00 AM to 4:00 PM, Wednesday through Sunday.
• Amount of travel: 1–2 weeks annually (rare deployment occasions and training attendance).

Work Environment & Physical Demands

The work environment is a professional office setting with a medium noise level.

• Regularly required to use hands to handle, feel, or touch; reach with hands and arms; talk and hear.
• Regularly required to stand, walk, sit, climb or balance, and stoop, kneel, crouch, or crawl.
• Regularly required to lift up to 10 pounds; frequently required to lift up to 25 pounds; occasionally required to lift up to 50 pounds.
• Vision requirements include close vision, distance vision, peripheral vision, depth perception, and ability to adjust focus.

Work Authorization / Security Clearance

• Active United States citizenship required.
• Must possess and maintain an active Top Secret security clearance with SCI eligibility.