Cybersecurity Systems Administrator

Description

This role supports U.S. Central Command with cyber technical work, focused on setting up, tuning, optimizing and maintaining the security infrastructure that protects the organization's digital assets from changing threats.

You will run and upkeep key cybersecurity systems: SIEM, EDR, network access control (Comply-to-Connect) and SOAR platforms.

Clearance: Top Secret/SCI must be held now. Job family: Cyber and IT Risk Management. No Public Trust or other clearance is required.

Responsibilities

• Configuration and optimization: work with cybersecurity stakeholders to define and put in place sound configurations for SIEM, EDR and network access control tools.
• Tailor SIEM alert rules, correlation searches and detection logic to meet security requirements and organizational goals.
• Deploy new SIEM instances, including clustered setups and apps.
• Adjust EDR policies, rulesets and scan settings to improve endpoint visibility and threat detection.
• Write Comply-to-Connect policies that enforce security posture and reduce the risk from unauthorized devices.
• Support Linux environments, and edit and maintain Splunk configuration files and apps.
• Collaborate with other Cybersecurity Engineering team members, and work with end users to gather requirements, troubleshoot, and help build Splunk search queries and dashboards.
• Connect cyber tools to a range of legacy data sources.
• Maintenance and support: carry out routine upkeep such as software updates, patches and performance tuning to keep cybersecurity systems reliable and efficient.
• Respond promptly to issues and incidents affecting SIEM, EDR, C2C and SOAR platforms, working with vendors or higher-level support when needed.
• Run regular audits and health checks to find vulnerabilities, misconfigurations or performance problems, and fix them.
• Give occasional presentations on tool capabilities to leadership.
• Policy and compliance: write and enforce configuration standards, security policies and operating procedures for cybersecurity systems that meet regulatory requirements and industry practice.
• Monitor adherence to security policies and regulations through audits, assessments and reporting, and correct any deviations or gaps.
• Work with compliance and audit teams to simplify regulatory work and show adherence to security standards.
• Integration and automation: connect cybersecurity systems with other security controls, data sources and IT infrastructure to form a unified security environment.
• Build and maintain automation scripts, playbooks and workflows in the SOAR platform to handle routine tasks, coordinate incident response and improve efficiency.
• Look for ways to improve through automation, orchestration and integration with new technologies and industry trends.
• Training and knowledge sharing: run training sessions and write process documentation so internal teams can use cybersecurity systems well.
• Share know-how, best practices and lessons learned with colleagues, formally and informally, to build a collaborative cybersecurity team.

Requirements

• Analytical thinking, cybersecurity strategy and Linux management.
• CompTIA Security+ CE certification.
• At least 3 years of related experience.
• Proficiency in Linux, including system administration and shell scripting for automation and customization.
• Working knowledge of cybersecurity principles, threat landscapes and best practices for configuring and tuning security tools.
• Strong analytical skills and attention to detail, with the ability to solve complex technical problems and improve system performance.
• Clear communication with technical and non-technical stakeholders.
• Ability to work independently, set priorities and meet deadlines in a demanding setting.
• Bachelor's degree in Information Systems, Computer Science, Computer Engineering or a related field.
• Certifications such as Security+, CISSP, GIAC or Splunk Core Certified Power User.
• 3 to 5+ years of cybersecurity administration experience, focused on configuring and managing SIEM, EDR, network access control and SOAR platforms.
• Top Secret/SCI clearance.
• U.S. citizenship is required.
• Desired: prior CENTCOM or COCOM experience.
• Desired: previous SOC experience.
• Desired: previous cyber system administration experience.
• Desired: Linux experience.

Conditions

Location: MacDill AFB, Florida, USA. Onsite work only.

Schedule: 40 hours per week.

Travel: less than 10% of the time.

Salary: the likely range is $105,400 to $142,600. Actual pay depends on experience, geographic location and possibly contract terms, and may fall outside this range.

Candidates must complete an identity verification process using biometrics and AI, and must be on camera for virtual interviews. The company may photograph you for verification, and by continuing you consent to collection and use of your biometric data for identity checks and security.

Equal opportunity employer, including individuals with disabilities and protected veterans.

Benefits

• Growth: an AI-powered career tool that suggests career steps and learning opportunities.
• Support: an internal mobility team that helps you reach your career goals.
• Rewards: medical plans (some with Health Savings Accounts), dental, vision, and a 401(k) with pre- and post-tax contributions up to IRS limits and a company match, plus competitive pay and paid time off.
• Paid leave covers vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave, and full flex work weeks are offered where possible.
• Protection: short- and long-term disability, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available.
• Community: an award-winning culture of innovation that is military-friendly.
• The company is a global technology and professional services firm serving U.S. government, defense and intelligence agencies, with about 26,000 staff across 50+ countries, working in AI, cloud, cyber and software development.