Cybersecurity Systems Administrator
About The Position
The Cybersecurity Systems Administrator provides cyber technical support for U.S. Central Command by configuring, tuning, optimizing, and maintaining critical security infrastructure. The role oversees essential cybersecurity systems, including SIEM, EDR, network access control (Comply-to-Connect), and SOAR platforms, to safeguard digital assets against evolving cyber threats. The administrator works with cybersecurity stakeholders and engineering team members to implement and optimize security tools, support Linux environments, integrate tools with legacy data sources, and assist end users with requirements, troubleshooting, Splunk searches, and dashboards. The role also maintains and audits systems, supports compliance and policy development, develops automation and incident-response workflows, and shares knowledge through training and documentation. The position is onsite at MacDill AFB, Florida, with 40 scheduled weekly hours and less than 10% travel required. A Top Secret clearance is required, with TS/SCI clearance specified in the success qualifications. U.S. citizenship is required.
Requirements
- Bachelor’s degree in Information Systems, Computer Science, Computer Engineering, or a related field.
- Five or more years of related experience; the posting also describes three to five-plus years of cybersecurity administration experience focused on configuring and managing SIEM, EDR, network access control, and SOAR platforms.
- Proficiency in Linux environments, including system administration and shell scripting for automation and customization.
- Solid understanding of cybersecurity principles, threat landscapes, and best practices for configuring and tuning security tools.
- Strong analytical skills and attention to detail, including the ability to troubleshoot complex technical issues and optimize system performance.
- Excellent communication and collaboration skills, including the ability to work effectively with technical and non-technical stakeholders.
- Ability to work independently, prioritize tasks, and meet deadlines in a dynamic, fast-paced environment.
- Relevant certifications are identified as needed for success, with Security+, CISSP, GIAC, and Splunk Core Certified Power User given as examples.
- Must currently possess a Top Secret clearance; TS/SCI is specified in the success qualifications.
- U.S. citizenship required.
Nice To Haves
- Prior CENTCOM or COCOM experience.
- Previous SOC experience.
- Previous cyber systems administration experience.
- Linux experience.
Responsibilities
- Collaborate with cybersecurity stakeholders to define and implement effective configurations for SIEM, EDR, and network access control solutions.
- Customize and optimize SIEM alert rules, correlation searches, and detection mechanisms to meet security requirements and organizational objectives.
- Deploy new SIEM instances, including clustered deployments and apps.
- Fine-tune EDR policies, rulesets, and scanning parameters to improve endpoint visibility and threat detection.
- Configure network access control policies for the Comply-to-Connect solution to enforce security posture and mitigate risks from unauthorized devices.
- Support Linux environments and edit and maintain Splunk configuration files and apps.
- Work with Cybersecurity Engineering team members and interact with end users to gather requirements, troubleshoot, provide assistance, and help create Splunk search queries and dashboards.
- Integrate cyber tools with legacy data sources and other security controls, data sources, and IT infrastructure components.
- Conduct routine software updates, patching, and performance tuning to maintain reliable and efficient cybersecurity systems.
- Provide timely support and troubleshoot issues and incidents involving SIEM, EDR, C2C, and SOAR platforms, working with vendors or higher-level support as needed.
- Perform system audits and health checks to identify vulnerabilities, misconfigurations, and performance issues, and implement corrective actions.
- Occasionally present tool capabilities to leadership.
- Develop and enforce configuration standards, security policies, and operating procedures in accordance with regulatory requirements and industry best practices.
- Monitor compliance through audits, assessments, and reporting, and take corrective action to address gaps or deviations.
- Collaborate with compliance and audit teams to support regulatory compliance and demonstrate adherence to security standards.
- Develop and maintain SOAR automation scripts, playbooks, and workflows to automate routine tasks, orchestrate incident response, and improve operational efficiency.
- Identify opportunities for innovation and continuous improvement using automation, orchestration, integration, and emerging technologies.
- Provide training and document processes so internal teams can use cybersecurity systems effectively.
- Share expertise, best practices, and lessons learned with colleagues through formal and informal channels.
Benefits
- Comprehensive benefits and wellness packages.
- 401(k) with company match.
- Competitive pay.
- Paid time off, including vacation, sick and personal time, holidays, and paid parental, military, bereavement, and jury duty leave.
- Medical plan options, some with Health Savings Accounts.
- Dental plan options.
- Vision plan.
- Full flex work weeks where possible.
- Short- and long-term disability benefits.
- Life, accidental death and dismemberment, personal accident, critical illness, and business travel and accident insurance are provided or available.
- AI-powered career tool identifying career steps and learning opportunities.
- Internal mobility team focused on career goals.
- Military-friendly workplace.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
