Overview
On Site
Full Time
Skills
Event management
Cyber security
Splunk
SIEM
Mentorship
UI
Red Hat Enterprise Linux
Servers
Dashboard
JavaScript
HTML
Cascading style sheets
Metrics
Data
Data retention
Policies
Software deployment
Communication
Elasticsearch
Kibana
Optimization
Security+
Copy editing
Customer engagement
Regulatory Compliance
STIG
Effective communication
DoD
Security clearance
Scripting
Customization
VMware
Linux
Microsoft Windows
Operating systems
Network design
Linux administration
Life insurance
Job Details
General Summary:
COLSA is seeking a Security Information and Event Management (SIEM) analyst for the AvMC contract. Candidate should have a background in cybersecurity compliance monitoring tools such as Elastic, Splunk, etc., and extensive Linux system administration knowledge.
Candidate will provide support and administration for transitioning current DoD Splunk environment to Elastic (ELK). Duties include but not limited to Linux platform administration, dashboard creation, and architecture enhancements needed in a dynamic environment. Candidate needs to possess understanding of evaluating, maintaining, and sustaining current SIEM related tools with possibility of other software evaluations. Candidate must have strong communication skills, work in a team environment to include mentoring more junior team members and understand both server backend and application frontend configurations.
Principal Duties and Responsibilities (*Essential Functions):
Administer, maintain, troubleshoot, and support an ElasticSearch environment on RHEL (Red Hat Enterprise Linux) servers on-premises.
Tune and optimize systems and data sources to better align with the organization's strategic Integrated Operating Center goals.
Ensure the Elasticsearch configurations continue to run under optimal conditions.
Develop dashboards and applications with custom JavaScript, HTML and CSS features to fulfill dynamic organizational requirements with visual metrics for stakeholders.
Onboard new data sources, parse, and extract relevant data while also monitoring license usage.
Create data retention policies and perform index administration, maintenance, and optimization.
Complete/Maintain STIG configuration checklists of Elastic deployment to support Army and DoD requirements.
Configure Elastic infrastructure to utilize trusted DoD certificates for all communication.
Develop customized Elasticsearch queries, filters, and visualizations to meet customer requirements.
Work with AvMC CIO G6 teams to identify inefficiencies in current monitoring services, propose and implement changes to streamline alerts or automate remediations.
At COLSA, people are our most valuable resource and centered at our core value. We invite you to unite your talents with opportunity and be a part of our "Family of Professionals!" Learn about our employee-centric culture and benefits here.
Required Experience
Required Qualifications
#crit
This position will be posted for a minimum of 3 business days. If a candidate has not been selected at that time, it will continue to be posted until a suitable candidate is selected or the position is closed.
COLSA offers a comprehensive and customizeable benefits program which includes Medical, Dental, Vision, Life Insurance, Short-Term Disability, Long-Term Disability, Accidental Death & Dismemberment, Supplemental Income Protection Programs, 401(k) with company match, Flexible Spending Accounts, Employee Assistance Program, Education & Certification Reimbursement, Employee Discount Program, Wellness Program, Paid Time Off and Holidays.
COLSA is seeking a Security Information and Event Management (SIEM) analyst for the AvMC contract. Candidate should have a background in cybersecurity compliance monitoring tools such as Elastic, Splunk, etc., and extensive Linux system administration knowledge.
Candidate will provide support and administration for transitioning current DoD Splunk environment to Elastic (ELK). Duties include but not limited to Linux platform administration, dashboard creation, and architecture enhancements needed in a dynamic environment. Candidate needs to possess understanding of evaluating, maintaining, and sustaining current SIEM related tools with possibility of other software evaluations. Candidate must have strong communication skills, work in a team environment to include mentoring more junior team members and understand both server backend and application frontend configurations.
Principal Duties and Responsibilities (*Essential Functions):
Administer, maintain, troubleshoot, and support an ElasticSearch environment on RHEL (Red Hat Enterprise Linux) servers on-premises.
Tune and optimize systems and data sources to better align with the organization's strategic Integrated Operating Center goals.
Ensure the Elasticsearch configurations continue to run under optimal conditions.
Develop dashboards and applications with custom JavaScript, HTML and CSS features to fulfill dynamic organizational requirements with visual metrics for stakeholders.
Onboard new data sources, parse, and extract relevant data while also monitoring license usage.
Create data retention policies and perform index administration, maintenance, and optimization.
Complete/Maintain STIG configuration checklists of Elastic deployment to support Army and DoD requirements.
Configure Elastic infrastructure to utilize trusted DoD certificates for all communication.
Develop customized Elasticsearch queries, filters, and visualizations to meet customer requirements.
Work with AvMC CIO G6 teams to identify inefficiencies in current monitoring services, propose and implement changes to streamline alerts or automate remediations.
At COLSA, people are our most valuable resource and centered at our core value. We invite you to unite your talents with opportunity and be a part of our "Family of Professionals!" Learn about our employee-centric culture and benefits here.
Required Experience
Required Qualifications
- Associates degree in related field, or the equivalent experience.
- Minimum of 7 years' work-related experience.
- Working knowledge of Elasticsearch, Logstash, and Kibana (ELK Stack), including configuration, optimization, and troubleshooting.
- Active CompTIA Security+ CE certification
- U.S. Citizenship required; must be able to obtain/maintain a DoD Secret clearance.
- Implementation of security best practices and ensure compliance with relevant regulations and standards (e.g., DISA STIGs) within the Elastic environment.
- Work related experience within DoD.
- Strong and effective communication skills
- Active DoD Secret clearance
- Working knowledge of scripting languages for automation and customization.
- Understanding of application performance concepts, VMware, Linux and Windows operating systems, and network infrastructure concepts.
- Working knowledge with Elastic Stack solutions
- Hands-on Linux system administration
- Working knowledge of ACAS scanning
#crit
This position will be posted for a minimum of 3 business days. If a candidate has not been selected at that time, it will continue to be posted until a suitable candidate is selected or the position is closed.
COLSA offers a comprehensive and customizeable benefits program which includes Medical, Dental, Vision, Life Insurance, Short-Term Disability, Long-Term Disability, Accidental Death & Dismemberment, Supplemental Income Protection Programs, 401(k) with company match, Flexible Spending Accounts, Employee Assistance Program, Education & Certification Reimbursement, Employee Discount Program, Wellness Program, Paid Time Off and Holidays.
Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.