Cybersecurity Systems Administrator

Description

The company is a global technology and professional services firm with about 26,000 staff. It delivers technology and mission services to U.S. government, defense, and intelligence agencies, across 50+ countries.

This role supports the Cyber Operations Security Operations Center (CSOC) for UISCENTCOM, helping keep the organization's digital assets protected from changing cyber threats.

You will set up, tune, and maintain core security platforms: SIEM, EDR, Comply-to-Connect (C2C) network access control, and SOAR.

Position requires a current Top Secret/SCI clearance, or the ability to obtain one. Public Trust is not required. Job family: Cyber and IT Risk Management. Regular position, 40 scheduled hours per week, onsite at MacDill AFB, Florida.

Responsibilities

• Work with cybersecurity stakeholders to design and put in place sound configurations for SIEM, EDR, and network access control tools.
• Tailor SIEM alert rules, correlation searches, and detections to match security needs and team goals.
• Stand up new SIEM instances, including clustered setups and apps.
• Adjust EDR policies, rulesets, and scan settings to improve endpoint visibility and threat detection.
• Set network access control policies in C2C to enforce device security posture and reduce risk from unknown devices.
• Support Linux systems and edit and maintain Splunk configuration files and apps.
• Partner with the cybersecurity engineering team and end users to collect requirements, troubleshoot issues, and help build Splunk searches and dashboards.
• Connect cyber tools to a range of legacy data sources.
• Run routine upkeep such as software updates, patches, and performance tuning to keep systems reliable and efficient.
• Troubleshoot and resolve SIEM, EDR, C2C, and SOAR issues, escalating to vendors or higher-level support when needed.
• Run regular audits and health checks to find vulnerabilities, misconfigurations, and performance problems, and fix them.
• Give occasional presentations to leadership on what the tools can do.
• Write and enforce configuration standards, security policies, and operating procedures that meet regulatory requirements and industry practice.
• Check adherence to security policies through audits, assessments, and reports, and correct any gaps.
• Work with compliance and audit teams to simplify regulatory work and show adherence to security standards.
• Connect cybersecurity systems with other controls, data sources, and IT infrastructure to form one coordinated security environment.
• Build and maintain automation scripts, playbooks, and SOAR workflows to handle routine tasks, orchestrate incident response, and improve efficiency.
• Look for ways to improve operations through automation, orchestration, and new technologies and trends.
• Create training and process documentation so internal teams can use the cybersecurity systems well.
• Share know-how, best practices, and lessons learned with colleagues, formally and informally, to build a collaborative team culture.

Requirements

• Bachelor's degree in Information Systems, Computer Science, Computer Engineering, or a related field.
• CompTIA Security+ CE certification.
• Applicable DoD 8140 or DoD 8570 certification.
• 5+ years of related experience.
• Proficiency in Linux, including system administration and shell scripting for automation and customization.
• Solid grasp of cybersecurity principles, threat trends, and best practices for configuring and tuning security tools.
• Strong analytical skills and close attention to detail, with the ability to solve complex technical problems and improve system performance.
• Clear communication and teamwork skills, able to work with both technical and non-technical stakeholders.
• Ability to work independently, set priorities, and meet deadlines in a dynamic environment.
• US citizenship required.
• Active Top Secret/SCI clearance required.
• Desired: prior CENTCOM or COCOM experience.
• Desired: previous SOC experience is a plus.
• Desired: previous cyber system administration experience is a plus.
• Desired: Linux experience.

Conditions

Location: MacDill AFB, Florida, USA, onsite.

Scheduled at 40 hours per week.

Travel: less than 10%.

Likely salary range is $102,000 to $138,000. This is not a guarantee. Final pay depends on experience, location, and possibly contract terms, and may fall outside this range.

As part of hiring, you will complete an identity verification process using biometrics and AI. You must be on camera for virtual interviews, and the company may take your photo to verify identity. By proceeding, you consent to the collection and use of your biometric data for verification and security.

The company is an equal opportunity employer that welcomes individuals with disabilities and protected veterans.

Benefits

• Medical plan options, some with Health Savings Accounts, plus dental and vision plans.
• 401(k) with company match, letting you contribute pre-tax or post-tax up to IRS limits.
• Full flex work weeks where possible.
• Paid time off: vacation, sick and personal time, holidays, paid parental, military, bereavement, and jury duty leave.
• Short- and long-term disability, life, accidental death and dismemberment, personal accident, critical illness, and business travel and accident insurance, provided or available.
• AI-powered career tool that suggests career steps and learning opportunities.
• Internal mobility team to help you reach your career goals.
• Competitive pay.