Cybersecurity Systems Administrator

General Dynamics Information Technology

1d • $105,400 - $142,600 • Onsite

About The Position

The Cybersecurity Systems Administrator provides cyber technical support for U.S. Central Command by configuring, tuning, optimizing, and maintaining security infrastructure. The role oversees systems including SIEM, EDR, network access control (Comply-to-Connect), and SOAR platforms to help safeguard digital assets against cyber threats. The administrator works with cybersecurity stakeholders, engineering teams, end users, vendors, and compliance and audit teams to deploy and maintain tools, troubleshoot issues, integrate data sources, support regulatory compliance, and share knowledge. The position is onsite at MacDill AFB in Florida, with 40 scheduled weekly hours and less than 10% travel required.

Requirements

• U.S. citizenship is required.
• Must currently possess Top Secret/SCI clearance and be able to obtain Top Secret/SCI clearance.
• Bachelor’s degree in Information Systems, Computer Science, Computer Engineering, or a related field.
• The posting lists 3+ years of related experience and also states five plus (3 to 5+) years of experience in cybersecurity administration, focused on configuring and managing SIEM, EDR, network access control, and SOAR platforms.
• Proficiency in Linux environments, including system administration and shell scripting for automation and customization.
• Understanding of cybersecurity principles, threat landscapes, and best practices for configuring and tuning security tools.
• Strong analytical skills and attention to detail, including the ability to troubleshoot complex technical issues and optimize system performance.
• Strong communication and collaboration skills for working with technical and non-technical stakeholders.
• Ability to work independently, prioritize tasks, and meet deadlines in a dynamic, fast-paced environment.

Nice To Haves

• Prior CENTCOM/COCOM experience.
• Previous SOC experience.
• Previous cyber system administration experience.
• Linux experience.
• Relevant certifications such as Security+, CISSP, GIAC, or Splunk Core Certified Power User.

Responsibilities

• Collaborate with cybersecurity stakeholders to define and implement configurations for SIEM, EDR, and network access control solutions.
• Customize and optimize SIEM alert rules, correlation searches, and detection mechanisms.
• Deploy new SIEM instances, including clustered deployments and apps.
• Fine-tune EDR policies, rulesets, and scanning parameters to improve endpoint visibility and threat detection.
• Configure network access control policies for the Comply-to-Connect solution.
• Support Linux environments and edit and maintain Splunk configuration files and apps.
• Work with Cybersecurity Engineering team members and end users to gather requirements, troubleshoot, and assist with creating Splunk search queries and dashboards.
• Integrate cyber tools with legacy data sources.
• Perform routine maintenance, software updates, patching, and performance tuning for cybersecurity systems.
• Provide support and troubleshooting for SIEM, EDR, C2C, and SOAR platforms, working with vendors or higher-level support as needed.
• Perform system audits and health checks, identify vulnerabilities, misconfigurations, or performance issues, and implement corrective actions.
• Present tool capabilities to leadership occasionally.
• Develop and enforce configuration standards, security policies, and operational procedures in accordance with regulatory requirements and industry best practices.
• Monitor policy and regulatory compliance through audits, assessments, and reporting, and address deviations or gaps.
• Collaborate with compliance and audit teams to support regulatory compliance and demonstrate adherence to security standards.
• Integrate cybersecurity systems with security controls, data sources, and IT infrastructure.
• Develop and maintain SOAR automation scripts, playbooks, and workflows to automate routine tasks and orchestrate incident response.
• Identify opportunities for innovation and continuous improvement through automation, orchestration, integration, and emerging technologies.
• Provide training and document processes to help internal teams use cybersecurity systems effectively.
• Share expertise, best practices, and lessons learned with colleagues.

Benefits

• Medical plan options, including plans with Health Savings Accounts.
• Dental plan options.
• Vision plan.
• 401(k) plan with company match.
• Flexible work weeks where possible.
• Paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement, and jury duty leave.
• Short- and long-term disability benefits.
• Life, accidental death and dismemberment, personal accident, critical illness, and business travel and accident insurance.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level