Senior Cyber Defense Engineer

Description

Senior Cyber Defense Engineer (Systems)

Position Summary
This is a perfect opportunity for the right person to become a key part of a team of cybersecurity professionals that are executing a pivotal role in protecting and defending the nation's critical infrastructure. The Senior Cyber Defense Engineer will create, implement, and subsequently mature and support Cyber Defense solutions in the Cyber Defense Engineering Systems Tower. This role will be responsible for supporting cyber defense capabilities of security logging and monitoring (SIEM), file integrity monitoring, and user behavior analytics technologies and processes. The ideal candidate will bring a balance of deep technical expertise and industry experience and work closely across teams to support engineering, deployment, maintenance, and enhancement of the security logging and monitoring infrastructure and platform. This is a challenging and rewarding opportunity for an individual who is looking for an opportunity in the Cyber Defense arena and wishes to grow within an organization.

Position Responsibilities

1. Create and Execute Cyber Defense solutions as directed by Cyber Defense management and in accordance with CME's Cyber Defense Roadmap
2. Manage projects according to project plans with a keen eye to objective delivery, cost adherence and minimizing risk
3. Maintain acute industry awareness of Cyber Defense Product Landscape, emerging and rising threat landscape and the latest/newest protocols/techniques/evolution in Cyber Security/Cyber Defense
4. Create complete Service Designs including, but not limited to, Technical Requirement Documents, Proof of Concept use cases, Technology Architecture/Engineering Documents, Service Operations Guides, etc.
5. Perform Service Transition to requisite Service Operations organizations and Service Consumers
6. The Senior Engineer will support cloud and on-prem security logging and monitoring capabilities, documentation, and operational activities
7. Implement log sources and assist in creation and tuning of security detections/rules, and dashboards/metrics
8. Responsible for CDE-Systems product lifecycle including, but not limited to, product patches, product upgrades, product end of life, etc.
9. Provide Tier 3 support for Primary and Secondary solutions assigned

Position Requirements

1. 5-7 or more years of IT security experience
2. Relevant experience in Linux System Administration, Networking, and/or Security
3. Ability to demonstrate a foundational knowledge of SIEM management, including content/rule development, automations, analytics, and parser management
4. Advanced understanding of logging concepts and ability to analyze data
5. Knowledge of Google Cloud security tools and services such as Google Chronicle and Security Command Center
6. Knowledge of File Integrity Monitoring solutions and capabilities a plus
7. Experience with a language such as Ruby, Perl, Python, Go, Scala, or Java
8. Good understanding around Continuous Integration/Continuous Deployment (CI/CD)
9. Familiar with GitOps practices, and experience with DevSecOps tools such as Git/Bitbucket, Maven, Jenkins, CHEF in a cloud environment
10. Experience working with containers, orchestration tools (like Kubernetes, Mesos, Docker Swarm etc.) and container registries (GCE, Docker hub etc.)
11. Experience with web application communication using RESTful APIs
12. Certifications a plus (i.e. CISSP, CISM, OSCP, etc.)
13. Cloud security certifications like Google Professional Cloud Security Engineer or equivalent are highly desirable
14. A solid understanding of Industry Security standards (ie: ISO27001/2, NIST Cyber Security Framework etc.)

#J-18808-Ljbffr