SIEM Subject Matter Expert

Description of Responsibilities

• SIEM infrastructure engineering, implementation and management.
• Ensure compliance with DISA STIG/SRG standards for CSSP related systems.
• Develop data integration strategies to enhance threat detection and response capabilities.
• Normalize data from sensors and log sources for use within data centric ecosystem.
• Implement log forwarding and maintain data pipelines ensuring continuous delivery as per customer requirements.
• Maintain documentation and automation scripts for system management.
• Manage hardware and software upgrades for CSSP systems.
• Engineer solutions to fulfill CSSP requirements of customer.
• Provide 24/7 on-call support for critical system issues.
• Provide technical support and develop Tactics, Techniques, and Procedures (TTPs) for tactical edge customers using security sensors and applications.
• Ensure compliance with Security Technical Implementation Guides (STIG) and Security Requirements Guides (SRG) standards.
• Annually review and update disaster recovery, backup, and COOP plans as well as related documentation.
• Other duties as assigned by supervisor.

Required Degree/Education/Certification

• Qualified under DoD 8140 (Cyber Defense Infrastructure Support Specialist (651) with either a Bachelor of Science degree in Computer Science or adjacent discipline from a National Centers of Academic Excellence in Cybersecurity (NCAE-C) designated institution OR hold one of the following certifications in lieu of education: FITSP-D, GDSA, CASP+, CCSP, Cloud+, CSSLP, or GSEC or Advanced Level Certifications.
• Secondary required certification: Confluent, Elastic, RHEL, CentOS certification.

Required Skills and Experience

• Able to implement, maintain, troubleshoot, and optimize the SIEM system to ensure effective security monitoring and incident response.
• Experience with Linux administration and familiarity with Windows server technologies.
• Proficiency in SIEM Administrations.
• Strong understanding of data management, data routing, and data security principles.
• Experience with the CORA Inspections, and DISA STIG/SRG compliance policies.
• Excellent problem-solving and analytical skills.
• Strong documentation and communication abilities.

Required Citizenship and Clearance

• Must be a U.S. Citizen.
• Minimum Secret clearance; must be TS eligible based on investigation type (T5).

Benefits

• Competitive salaries.
• Eligible full-time employees enjoy a 401K plan with company match; medical, dental, disability, and life insurance coverage; tuition reimbursement; paid time off; and 11 paid holidays.

Pay

Commensurate with experience.

Schedule

N/A