Cybersecurity Operations Specialist -SIEM Services (Evergreen)

Cybersecurity Operations SpecialistGDIT is seeking a motivated, career and customer-oriented Cybersecurity Operations Specialist to perform on our Cybersecurity Data Analysis Services team in Springfield, VA.The team member shall provide cybersecurity data analysis services, which designs, develops, builds, tests, configures, employs, operates, integrates, sustains, and refreshes the Security Information Events Management (SIEM) capability (i.e. Enterprise Audit), long-term analytics platform, log aggregation platform, and the cyber threat intelligence capability, signature development and deployment, and reputation management services. This includes the onboarding of all new and existing IT resources, and ensuring the correct routing of all audit events to mission partners in accordance with Intelligence Community Standards (ICS) 500-27.Job duties include:Providing all preventative and corrective maintenance to ensure consistent, reliable, and secure service availability.Maintaining system availability and reliability with a threshold of 99.99%.Detecting and ticketing degradations (volume/velocity) of all SIEM data flows within 60 minutes of the start of the degradation.Performing day-to-day maintenance, and specific scheduled maintenance activities that result from manufacturers recommended service intervals, alerts, bulletins, available patches, and updates according to agency approved change management processes.Executing emergency maintenance actions with sufficient urgency to preclude unacceptable outage durations, approved by the Government prior to execution, and coordinated through and approved by CSOC and ESC government management.Performing all development, engineering, testing, integration, and implementation actions necessary for major vendor revisions.Performing continuous engineering assessments to improve the performance, effectiveness, coverage, and maturity of this service.Retaining documentation regarding loss of event logs.Configuring all assets assigned to this service within the Government Furnished Information - Software Tools list in accordance with all Federal, DoD, IC, and NCE laws, directives, orders, polices, guidance, procedures etc.Performing all development, design, engineering, testing, integration, and implementation actions needed for the total integration and interoperability between all applicable assets in the Government Furnished Information - Software Tools list.Utilizing agency approved ticketing systems to document, track, assign, update, and coordinate all engineering, integration, configuration, and maintenance actions.Using various monitoring, analysis, and visualization tools to track effectiveness, status, performance metrics, and other information as needed or required by Government staff and contractors assigned Cybersecurity Operations Services and Cybersecurity Readiness Services.Required skills:SIEM experience with one of the following ArcSight, ElasticSearch, Splunk, Event Broker, User Behavioral Analysis (UBA)Experience providing support to Cybersecurity Operations Cell (CSOC) in creating alerting rulesCreate SIEM playbooksLinux (RHEL) Expert (administration and engineering)Proficient in manipulating SIEM filters to better find and analyze potential malicious/atypical activity and reduce false positivesExperience with content development within ArcSight and Kibana to facilitate Cyber Analysts ability to investigate malicious eventsCreation of ArcSight rules based on use cases of malicious eventsTuning and aggregation of queries and filtersSkilled in troubleshooting event flow through Enterprise Audit infrastructureSkilled in troubleshooting event format and parsing for ingest into data storage and into SIEM toolsActive TS/SCI ClearanceDoD -M IAT Level II and CSSP Infrastructure Support certifications6+ years Experience with SIEM and Development Projects6+ years Experience with SIEM support for projects and technical exchange meetings6+ years Experience developing and maintaining enterprise audit projectsDesired skills:KibanaData AnalyticsThe likely salary range for this position is $128,039 - $173,229. This is not, however, a guarantee of compensation or salary.

Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.Scheduled weekly hours: 40Travel required: NoneTelecommuting options: OnsiteWork location: USA VA SpringfieldAdditional work locations:Total rewards at GDIT:Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave. To ensure our employees are able to protect their income, other offerings such as short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available. We regularly review our Total Rewards package to ensure our offerings are competitive and reflect what our employees have told us they value most.Our identity verification process:As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud.

You are expected to be on camera during virtual interviews. We reserve the right to take your picture to verify your identity and prevent fraud. By proceeding, you authorize the collection, processing, and use of your biometric data for identity verification and security purposes.About our work:We are GDIT. A global technology and professional services company that delivers technology solutions and mission services to every major agency across the U.S.

government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50+ countries worldwide, offering leading mission-ready capabilities in AI, cloud, cyber and software development.