Cyber Security Analyst - SIEM Engineer

General Dynamics Mission Systems, Inc•San Antonio, TX

2d•$142,696 - $158,303•Onsite

About The Position

We are seeking a highly skilled and experienced Cyber Security Analyst / SIEM Engineer to join our SPRINT Next program team in San Antonio, Texas. In this position, you will serve as a security engineer responsible for administering and advancing our enterprise SIEM environment, while ensuring full compliance with DoD and Intelligence Community security frameworks. You will play a hands-on role in both the technical execution and leadership of our cybersecurity monitoring, vulnerability management, and accreditation programs across the full system lifecycle.

Requirements

Bachelor's degree in Engineering, or a related Science or Mathematics field, plus a minimum of 8 years of relevant experience; or Master's degree plus a minimum of 6 years of relevant experience.
Current or active Department of Defense Top Secret clearance with SCI eligibility required with ability to obtain a Polygraph is required at time of hire.
Applicants selected will be subject to a U.S. Government security investigation and must meet eligibility requirements for access to classified information.
Due to the nature of work performed within our facilities, U.S. citizenship is required.
8+ years of hands-on Information Assurance and cybersecurity engineering experience, with demonstrated knowledge of security documentation and requirements analysis
Proven expertise as a Splunk Administrator and Dashboard Developer, designing and maintaining dashboards that meet NIST and JSIG cybersecurity control requirements
Hands-on proficiency with ACAS/Nessus vulnerability scanning and SCAP Compliance Checker for continuous monitoring, system assessments, and STIG validation
Strong working knowledge of RMF processes, including the development and maintenance of Body of Evidence (BoE) documentation and support of full A&A/C&A lifecycle activities
Hands-on experience with UNIX/LINUX command-line security audits.
Technical knowledge of UNIX/LINUX and Windows operating systems.
Demonstrated familiarity with government security standards including ICD 503, NISPOM, NIST 800-53, and DIACAP, RMF
Must meet DoD 8570.1/8140 certification requirements with CE at the IAM Level II or IAT Level III baseline or above.

Nice To Haves

CISSP certification is strongly preferred and reflects the senior level of expertise this role demands
Splunk certifications such as Splunk Core Certified Power User or Administrator highlight your technical depth in SIEM operations
Experience security planning, cost, and risk analyses at the program level within a classified DoD or Intelligence Community environment
Experience supporting environments based on Joint Special Access Program (JSIG) in implementation of Risk Management Framework (RMF).
Ability to synthesize complex compliance requirements into auditable, practical security solutions that satisfy both technical and customer expectations
Strong and proven hands-on experience with UNIX/LINUX command-line security audits.
Strong and proven technical knowledge of UNIX/LINUX and Windows operating systems.
Familiarity with additional SIEM platforms such as IBM QRadar or Microsoft Sentinel further strengthens your ability to bring broad security monitoring expertise to the team

Responsibilities

Taking ownership and leadership of enterprise SIEM operations and security dashboard development in a high-impact classified defense environment supporting the SPRINT Next program
Directly influencing program cybersecurity posture through hands-on use of industry-leading tools including Splunk, ACAS/Nessus, and SCAP Compliance Checker
Part of a dynamic Cyber Security team supporting Assessment and Authorization (A&A) activities and Body of Evidence development that shape program accreditation success
Collaborating with program leaders, engineers, and government customers to deliver meaningful security solutions aligned to mission needs
A strong opportunity for professional impact and growth within a senior-level cybersecurity engineering role on a mission-critical defense program
Administering and advancing our enterprise SIEM environment, while ensuring full compliance with DoD and Intelligence Community security frameworks.
Technical execution and leadership of our cybersecurity monitoring, vulnerability management, and accreditation programs across the full system lifecycle.