Cybersecurity Technical Administrator Cloud Splunk
Apply on
We are hiring for Cybersecurity Technical Administrator Cloud Splunk to support our Federal Client/Project.
Company Name: - JTSi (Johnson Technology Systems, Inc.)
Title: Cybersecurity Technical Administrator Cloud Splunk
Location: Remote
Project: DOD
Employment Requirements: US Person
Clearance: DOD Secret (Fully Adjudicated), as a minimum
Job Responsibilities:
This position is for a Cybersecurity Technical Administrator supporting the Cybersecurity Incident Response Team. This position can be performed remotely. Hosting provider for Army IT systems providing various levels of sustainment support for our hosted systems. Managed service provider (MSP) for Army IT systems, and we support enterprise applications owners in migrating their systems into Azure or AWS. We also provide sustainment services to support their applications. This position is for a cybersecurity technical administrator role to support a full range of cybersecurity services that provides to our customers.
JOB DUTIES:
- As part of the Cybersecurity Division - Cyber Incident Response Team, deploy, install, manage, and operate Security Information and Event Management (SIEM) solutions to include Splunk.
- Responsible for assessment of threats and vulnerabilities to organizational computing assets and developing/integrating rules, queries, and filtering techniques to produce meaningful risk analysis for responses.
- Coordinate with team to ensure all devices and components report all relevant logs to the SIEM solution and perform troubleshooting and maintenance of assets.
- Monitor DoD and Army web application security standards and best practices as well as reported/disclosed vulnerabilities. Work with internal and external customers to track, remediate, and report compliance for disclosed vulnerabilities.
- Work with a team to review Army Cyber Tasking Orders (CTOs), determine applicability and response, and incorporate required changes.
- Validate technical security controls are in place for operating systems, applications, and network appliances, and recommend enhancements.
- Review proposed SIEM configuration changes for security impact.
- Work with technical and policy teams to implement, maintain, and monitor technical security configuration controls, including: STIGs, SRGs, and other industry security hardening guidance.
- Collaborate with internal and external parties to transform high-level technical objectives into comprehensive technical requirements.
- Interact with Army Cyber Security Service Providers and customer ISSOs/ISSMs on a regular basis.
- This position may require on-call duties.
Required Skills:
- Mid to senior level Cybersecurity Technical Administrator experience.
- DoD 8570.01-M IAT level II certification is required.
- Resource must possess Baseline certification as defined in DoD Instruction 8570.01-M (generally Security+ CE).
- AWS Certified Cloud Practitioner Foundational (or similar AWS certification)
- Computing environment qualifications for this environment include documented training or certification on Red Hat Enterprise Linux and Splunk Enterprise . Contractors have up to 6 months from appointment to the cybersecurity position to complete the computing environment requirement.
- Extensive experience implementing, tuning, and monitoring SIEM rulesets.
- Experience working with auditors, customers, and other stakeholders to develop meaningful alerts, dashboards, and reports.
- Strong understanding of common cyber threat patterns, indicators of compromise, and defenses.
- Strong understanding of Linux (preferred) and Windows Operating Systems.
- Working knowledge of DoD STIGs, and IA Vulnerability Management (IAVM).
- Strong verbal and written communication skills.
- Ability to work cooperatively as a member of a team.
- Ability to interpret and apply rules, regulations, and procedures.
- Ability to gather, analyze, and present facts.
- Basic understanding of DOD Risk Management Framework Assessment & Authorization (RMF A&A).
- Experience automating routine administrative tasks desired.
- Understanding of network, storage, server, and application technologies.
If you are available, interested, planning to make a change, or know of a friend who might have the required qualifications and interest, please call me ASAP on / If you do respond via e-mail ( ) please include a daytime phone number so I can reach you. In considering candidates, time is of the essence, so please respond ASAP with your updated resume.
Established in 2003, JTSi is a Professional IT & Engineering Services provider with years of documented experience in the Information Technology and Engineering services field. JTSi has a proven track record for successfully delivering mission critical Professional services to the Government and the industry. JTSi SAP team delivers solutions to its clients by clearly understanding their core business problems. We do what we say!
