Job Description
ASRC Federal Broadleaf Division is hiring for a Cybersecurity Engineer (SIEM) to support the DCSA in Hanover, MD.
JOB DESCRIPTION:
ASRC is hiring a SIEM Engineer to support onsite in Hanover MD. This position has been approved for hybrid support (1 days onsite/4 days remote).
This is a technical, hands-on role responsible for the successful operation of a variety of cybersecurity tools, logging framework, and cybersecurity infrastructure
Support written technical deliverables for customers and build new capabilities
Contributions to infrastructure, data pipeline, analytics dashboards, and other resources will be delivered to threat analysts for consumption
Enhance the Joint Staff's ability to secure systems and networks through implementation of the Elastic product family's SIEM tool
Facilitate data ingestion of logs including Extract, Transform, and Load (ETL) functions to develop dashboards, visualization, and alerting
Create Standard Operation Procedures (SOPs) and perform index administration, maintenance and optimization
Develop daily and weekly PowerPoint presentations to brief management and the team
Ability to analyze security vulnerability reports and develop/implement a plan to Recognizes and seizes opportunities to improve products, services or approaches
Design, document, build, secure, and maintain Elastic Stack solutions deployed in the Cloud or on-premises
Engagement with avenues of influence (Splunk product managers, user groups, ) to align platform capabilities with business requirements
#Broadleaf
#dice
Requirements
BASIC QUALIFICATIONS:
EXPERIENCE: At least five (5) years of experience in information technology or security engineering and three (3) years of direct Elastic administration experience
Experience with developing automated capabilities for securing environments.
Experience with STIG compliance and vulnerability management
Knowledge of JFQ DoDIN DoD 8510.01 RMF IA Controls (IACs) and implementation.
Requires an extensive knowledge of application or infrastructure systems architecture, usually having experience with multiple system technologies
Ability to mitigate critical vulnerabilities.
ADDITIONAL DESIRED SKILLS Swimlane – Integration
DevSecOps experience
Cloud certifications and experience (AWS, Azure)
EDUCATION Bachelor's degree in Information Security or related field and/or equivalent combination of experience.
CERTIFICATION(S) DoD 8140/8570 IAT Level II/III certifications required
One or more certifications:
GIAC Certified Detection Analyst (GCDA)
CompTIA Cybersecurity Analyst (CySA+)
Elastic Certified Engineer
Elastic Certified Analyst
Elastic Certified Observability Engineer
Certified SOC Analyst (EC-CSA)
CLEARANCE LEVEL: Minimum Secret
Ability to obtain and maintain Top Security/SCI clearance
EEO Statement
ASRC Federal and its Subsidiaries are Equal Opportunity / Affirmative Action employers. All qualified applicants will receive consideration for employment without regard to race, gender, color, age, sexual orientation, gender identification, national origin, religion, marital status, ancestry, citizenship, disability, protected veteran status, or any other factor prohibited by applicable law.
