1+ months

SOC Tools System Administrator (Government)

Purcellville, VA 20132
Security Operations Center (SOC) Tools Administrator will manage, operate, and enhance the suite of security tools that enable the scanning, remediate, and overall posture levels of the operational infrastructure.

In this role, you will you will be responsible for the following:
The position requires the security tools systems administrator to monitor the health and serviceability of the tools; Primary Splunk administration. The individual must have the experience to operate and configure the tool to provide an operational view of the environment through reports and web enabled GUI presentation layers (Dashboards and reports). This will require the administrator to have the experience in the scoped design of ELK, Splunk, implementation (server and targeted managed nodes) and general to advanced administration (includes but not limited to working in a multi-clustered / tiered customer managed environment, management of dashboards, reporting operations, and visual alarms/alert mechanisms to other commercial trap management systems).



Scope and responsibilities include:

  • Implement security tools and processes for efficient and effective operational management of the environment -- change management, monitoring, alerting, incident handling, customer request handling, etc.
  • Troubleshoot networking issues, enhance network performance and reliability.
  • Interact with Operations Engineers, Operators, and SOC Analysts to provide solutions and resolve problems in a timely and proactive manner.
  • Specialized application of security settings and other commercial best practices such as DISA STIGS.
  • Define functional requirements, perform research, evaluate vendors/solutions, and design/implement solutions.
  • Engage/negotiate with operations stakeholders to develop software behavioral requirements; to be translated by software development into minimal viable product.
  • Develop and maintain capacity plans for Splunk sizing for both aggregation as well as overall license management of the tool
  • Ability to clearly document and articulate findings that will enable team members to perform their duties
  • Provide technical engineering support to all phases of network development, operation and management.
  • Analyze network topologies and network performance.
Required Skills and Experience:
  • Five (5) years or more of experience as Security Tools Administrator (ELK, Splunk, Tenable, Nessus) on a large enterprise
  • An individual capable of multitasking, direct problem to solution-oriented results
  • Skills that would enable a candidate:
  • Shell scripting in Linux and Windows environments, Splunk training and certification, experience in the ability to build customer dashboards and visual models.
Desired Certification and Experience:
  • Splunk, ELK, Tenable, Nessus, Security+ certifications
  • 5+ years in IT Infrastructure, network, architecture, systems administration or security to include firewall administration
Successful Candidates will be expected to perform the following tasks with minimal supervision and oversight.

Identify normal ES use cases
Examine deployment requirements for typical ES installs
Install ES and gather information for lookups
Setting up inputs using technology add-ons
Create custom correlation searches
Configure ES risk analysis, threat and protocol intelligence
Fine tune ESs settings and other customizations

Required Clearance:
Secret or higher

AT&T is an Affirmative Action/Equal Opportunity Employer and we are committed to hiring a diverse and talented workforce. EOE/AA/M/F/D/V



Scope and responsibilities include:
  • Implement security tools and processes for efficient and effective operational management of the environment -- change management, monitoring, alerting, incident handling, customer request handling, etc.
  • Troubleshoot networking issues, enhance network performance and reliability.
  • Interact with Operations Engineers, Operators, and SOC Analysts to provide solutions and resolve problems in a timely and proactive manner.
  • Specialized application of security settings and other commercial best practices such as DISA STIGS.
  • Define functional requirements, perform research, evaluate vendors/solutions, and design/implement solutions.
  • Engage/negotiate with operations stakeholders to develop software behavioral requirements; to be translated by software development into minimal viable product.
  • Develop and maintain capacity plans for Splunk sizing for both aggregation as well as overall license management of the tool
  • Ability to clearly document and articulate findings that will enable team members to perform their duties
  • Provide technical engineering support to all phases of network development, operation and management.
  • Analyze network topologies and network performance.
Required Skills and Experience:
  • Five (5) years or more of experience as Security Tools Administrator (ELK, Splunk, Tenable, Nessus) on a large enterprise
  • An individual capable of multitasking, direct problem to solution-oriented results
  • Skills that would enable a candidate:
  • Shell scripting in Linux and Windows environments, Splunk training and certification, experience in the ability to build customer dashboards and visual models.
Desired Certification and Experience:
  • Splunk, ELK, Tenable, Nessus, Security+ certifications
  • 5+ years in IT Infrastructure, network, architecture, systems administration or security to include firewall administration
Successful Candidates will be expected to perform the following tasks with minimal supervision and oversight.

Identify normal ES use cases
Examine deployment requirements for typical ES installs
Install ES and gather information for lookups
Setting up inputs using technology add-ons
Create custom correlation searches
Configure ES risk analysis, threat and protocol intelligence
Fine tune ESs settings and other customizations

Required Clearance:
Secret or higher

AT&T is an Affirmative Action/Equal Opportunity Employer and we are committed to hiring a diverse and talented workforce. EOE/AA/M/F/D/V


Categories

Posted: 2019-08-20 Expires: 2019-12-09

Before you go...

Our free job seeker tools include alerts for new jobs, saving your favorites, optimized job matching, and more! Just enter your email below.

Share this job:

SOC Tools System Administrator (Government)

AT&T
Purcellville, VA 20132

Join us to start saving your Favorite Jobs!

Sign In Create Account
Powered ByCareerCast