Cyber Data Analysis Engineer III

Description

This role builds and upkeeps the enterprise environment used to gather, keep and show data that supports cybersecurity work for government missions.

You will work with on-premise and cloud systems and several software products to gather log data from multiple government agencies, following policy, so the data stays easy to retrieve.

The role suits someone self-driven, detail-focused, open to learning, willing to share knowledge, organized with time, and committed to thorough documentation. Clear listening, speaking and note-taking, along with teamwork, are needed.

Responsibilities

• Set up, operate and repair the pipelines that collect logs, using Cribl, ArcSight, Kafka, AWS products, Linux servers and Microsoft servers.
• Help customers route their log data across one or more enterprise networks to the target destination.
• Build and maintain log management environments on Elasticsearch or Sentinel.
• Troubleshoot data flow problems between the SIEM collection point and the SIEM or chosen long-term storage.
• Fix data display and data storage issues inside the SIEM environment.
• Work out the root causes of complex problems.
• Keep products running with high uptime.
• Keep application, system and product versions current under agency enterprise policies.
• Research the physical or cloud resources needed to better support specific Linux systems or hosted products.
• Improve processes with scripts, Ansible or AWS products.
• Write up tasks, processes, changes and product status.
• Train the team on tasks and products.
• Work with internal and external customers through every project phase, stay alert to their needs, and answer their questions promptly.
• Pay close attention to detail.
• Occasional on-call duty, including nights and weekends, though this is very rare.

Requirements

• Required: 2+ years of enterprise LAN networking experience.
• Required: 3+ years of Unix or Linux server administration, or similar work.
• Required: 2+ years of Windows server administration, or similar work.
• Required: 2+ years of hands-on AWS experience.
• Required: Clear written and spoken communication.
• Required: Solid listening and comprehension skills.
• Required: Active Top Secret/SCI clearance and experience on US Government contracts.
• Required: DOD 8570 IAT Level II and CSSP Infrastructure Support certifications, earned within 120 days of starting.
• Desired: 1+ years in at least one of: WAN networking, Elasticsearch, Sentinel, Kafka, ArcSight, Kubernetes, Cribl or Ansible.
• Desired: Experience with one or more scripting languages: YAML, Python, Bash or Ruby.
• Desired: Experience with version control tools such as Git.

Conditions

Full-time, regular position in Information Technology.

Minimum clearance required to start: TS/SCI.

Travel up to 10%, local only.

Proposed salary range: $86,600 to $181,800.

Final pay depends on factors such as geographic location, Federal Government contract labor categories and wage rates, relevant prior experience, specific skills, education and certifications.

The company gives staff flexibility to balance quality work with their personal lives.

Benefits

• Healthcare, wellness, financial, retirement, family support, continuing education and time off benefits.
• Flexible time off so you can take the time you need.
• Access to learning resources to support your career goals.
• Competitive compensation and learning and development opportunities.
• Benefits designed to support and protect employees and their families.