CSSP Cybersecurity Engineer
About The Position
The DTRA CSSP Cybersecurity Engineer serves as the principal technical authority responsible for the design, deployment, sustainment, and optimization of the CSSP's security toolsets and infrastructure. This engineering role is critical for leading complex, enterprise-wide SIEM migrations, orchestrating the secure ingestion and normalization of diverse subscriber data sources, and executing rigorous patch management on underlying CSSP infrastructure. By bridging the gap between advanced systems engineering and CSSP compliance, this engineer ensures continuous operational readiness, high-fidelity security telemetry, and strict adherence to JFHQ-DoDIN defensive mandates.
Requirements
- Minimum of 2 to 8 years of progressive work experience in cybersecurity systems engineering, systems administration, or defensive infrastructure support.
- Bachelor of Arts (BA) or Bachelor of Science (BS) degree from an accredited college or university.
- Active Top Secret security clearance with SCI eligibility.
- DoD 8570/8140 Compliance: IAT Level II
- DoD 8570/8140 Compliance: CSSP Infrastructure Support or equivalent certification
- Demonstrated experience implementing cybersecurity engineering principles to meet Federal framework goals.
- Proven track record of providing high-level technical drawings, validating complex technical solutions, and connecting business, system, and data flows.
- Active United States Citizenship is required.
- Must possess and maintain an active Top Secret security clearance with SCI eligibility.
Nice To Haves
- Deep technical experience executing SIEM migrations, developing parsing rules (regex), managing syslog aggregators, and mapping log ingestion frameworks to cybersecurity standards.
Responsibilities
- Manage, configure, and optimize DTRA CSSP security toolsets to assist analysts in performing rapid initial triage and deep-dive alert investigations.
- Proactively engineer new technical solutions, develop dashboards to highlight critical network activity, and continuously monitor system utilization to prevent resource degradation.
- Design, propose, and implement configuration updates to existing CSSP infrastructure.
- Formally document all change proposals, draft technical drawings, and maintain precise records of system modifications to ensure strict alignment with organizational change control processes.
- Oversee the technical integration of new incoming subscribers into the central SIEM.
- Configure forwarders, APIs, and syslog collectors to securely ingest subscriber datasets, ensuring robust telemetry collection across all aligned networks.
- Ensure all inbound subscriber log feeds are continuously validated, parsed, and normalized against the Splunk Common Information Model (CIM).
- Assist in the sustainment of machine learning solutions built on normalized datasets to improve defensive detection capabilities.
- Maintain host security for all Enterprise Security Linux systems within the CSSP.
- Apply routine vulnerability patches and enforce Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIG) to maintain a secure operating baseline.
- Partner closely with customer stakeholders, systems administrators, and leadership to validate engineering solutions.
- Create professional technical manuals, standard operating procedures, architectural network diagrams, training slide decks, and project reports.
Benefits
- health
- dental
- vision
- 401K
- life insurance
- short-term and long-term disability plans
- vacation time
- holidays
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
