Cyber Security Engineer

Overview

Abile Group has an exciting and challenging opportunity for a Cyber Security Engineer on a contract providing Network and Cybersecurity services supporting an Intelligence Community customer. All the personnel on the team will work together to support transport and cybersecurity information technology (IT) services on multiple networks and security domains, at multiple locations worldwide, inclusive of new facilities and building constructions to support the IC mission. 

 

The right candidate will possess the below skills and qualifications and be ready to handle all responsibilities independently and professionally.

Responsibilities

• Provides all preventative and corrective maintenance to ensure consistent, reliable, and secure service availability. This includes all actions required to return the service to full operational capability such as vendor RMA processes, removal and proper disposal of broken equipment/software, installation and testing of new equipment/software, and configuration of new equipment/software
• Maintains system availability and reliability with a threshold of 99.99%
• Detects and tickets degradations (volume/velocity) of all SIEM data flows within 60 minutes of the start of the degradation
• Performs day-to-day maintenance, and specific scheduled maintenance activities that result from manufacturers recommended service intervals, alerts, bulletins, available patches, and updates according to agency approved change management processes. This includes maintaining updated documentation, change logs, and service bulletin libraries for all supported equipment and software in the Cybersecurity Operations Cell (CSOC) knowledge management platform
• Executes emergency maintenance actions with sufficient urgency to preclude unacceptable outage durations, approved by the Government prior to execution, and coordinated through and approved by CSOC and ESC government management
• Performs all development, engineering, testing, integration, and implementation actions necessary for major vendor revisions
• Performs continuous engineering assessments to improve the performance, effectiveness, coverage, and maturity of this service.
• Retains documentation regarding loss of event logs (e.g. June 5-7th DNS logs were not ingested from SBU and are lost)
• Configures all assets assigned to this service within the Government Furnished Information - Software Tools list in accordance with all Federal, DoD, IC, and NGA laws, directives, orders, polices, guidance, procedures etc.
• Performs all development, design, engineering, testing, integration, and implementation actions needed for the total integration and interoperability between all applicable assets in the Government Furnished Information - Software Tools list. This includes ensuing all data flows are properly parsed for ingestion/transmission to internal and external automated reporting systems (e.g. JFHQ DoDIN – Joint Incident Management System, DoD CIO – DoD Scorecard/Get to Green reporting, IC CIO – Cybersecurity Performance Evaluation Model reporting, etc.)
• Utilizes agency approved ticketing systems to document, track, assign, update, and coordinate all engineering, integration, configuration, and maintenance actions
• Uses various monitoring, analysis, and visualization tools to track effectiveness, status, performance metrics, and other information as needed or required by
• Government staff and contractors assigned Cybersecurity Operations Services and Cybersecurity Readiness Services

Qualifications

Clearance Required: TS/SCI with ability to pass a CI Poly

 

Degree and Years of Experience: Bachelor’s Degree with minimum 6 years of relevant experience.

 

Required Certifications:

• DoD 8570.01-M IAT Level II and CSSP Infrastructure Support certifications

Required Skills:

• Maintain enterprise cybersecurity infrastructure requirements
• Appliy Elastic search experience to optimize SIEM and data utilization for long term archive
• Monitor, maintain and Upgrade petabyte scale Elasticsearch environment
• Elasticsearch expert to include infrastructure support experience
• AWS cloud expert
• Linux (RHEL) Expert
• Bash / Python Scripting
• DevOps

Desired Skills: 

• Regex
• Data paring experience
• Data routing
• Experience with data broker technologies such as Kafka
• Experience with Logstash
• Elasticsearch SIEM experience

About Abile Group, Inc.

Abile Group, Inc. was formed in July 2004 to partner with the Intelligence Community and their Contractors in the areas of Enterprise Analytics & Performance Mana