Senior Cybersecurity Incident Response Administrator

This is a fully remote position, open to applicants in Virginia.

📋 Description

• Deploy, install, manage infrastructure, and monitor events within SIEM systems in alignment with the Army Business System Log Data Policy and other DoD/Army mandates.

• Design SIEM dashboards for the visualization of security-related incidents and near real-time anomaly detection.

• Oversee SIEM dashboards to identify threats and anomalies, investigate incidents, and escalate as needed.

• Evaluate and develop reporting criteria to support audits and security controls.

• Offer Public Key Infrastructure (PKI) support and monitor security standards for DoD/Army web applications.

• Review Army Cyber Tasking Orders (CTOs) and collaborate with Army Cyber Security Service Providers.

• Engage in Software Assurance reviews and assess Information Systems Design Plans for compliance with security regulations, policies, and best practices.

• Provide support for mission-critical Army IT services across enterprise data centers and cloud-hosted environments.

⛳️ Requirements

• Cybersecurity Certification (such as CISSP, ISSEP, Security+, CEH, or equivalent).

• Active DoD Secret Security Clearance.

• A minimum of 10 years' experience in Cybersecurity and Incident Response or related fields.

• Extensive experience managing SIEM systems, including the ingestion of relevant data into the SIEM.

• Proficient in creating and managing SIEM dashboards for the visualization of security events.

• Strong capability to monitor and investigate security incidents and anomalies.

• Experience in developing reporting requirements for audits and security controls.

• Knowledge of Public Key Infrastructure (PKI) and management of SSL/TLS certificates.

• Familiarity with DoD and Army web application security standards and best practices.

• Ability to review and respond to Army Cyber Tasking Orders (CTOs).

• Experience in coordinating with Cyber Security Service Providers for audit logs and incident response.

• Participation in Software Assurance reviews for application audit log validation.

• Ability to review and evaluate Information Systems Design Plans and associated documents for security compliance.

• Understanding of Army enterprise monitoring tools and practices.

• Experience with incident response activities.

• Familiarity with engineering change proposals and configuration management.

• Understanding of Continuity of Operations Plans and Communication Plans.

• Knowledge of security regulations and best practices in the industry.

• Ability to work effectively in a team setting and collaborate with various stakeholders.

🏝️ Benefits

• Remote-eligible position.

• Option to work locally/on-site or in a hybrid capacity for candidates who prefer that arrangement.

• Military-friendly employer supporting active-duty and veteran employees.