Cyber Data Engineer

Ssd Anc; San Antonio (TX); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Tuition reimbursement

Medical and vision insurance

Paid holidays and PTO

Job summary

STS Systems Defense, LLC (SSD) is seeking a Cyber Data Engineer to support Lackland AFB in San Antonio, TX. You will write scripts to automate patching, enhance SIEM capabilities, and develop new cybersecurity features.

Responsibilities include vulnerability analysis, patch testing, and reporting of security posture for DoD systems. You will work with Splunk/ELK-based analytics, Python/C++ scripting, and various security tools, contributing to mission assurance and incident response at the

Qualifications

• U.S. citizenship with Active TS/SCI clearance is required.
• Bachelor's or higher in Software Engineering or related field.
• 3+ years of relevant cybersecurity experience in threat detection and response.
• Strong experience in SIEM, log analytics, and security monitoring tools.

Responsibilities

• Develop and maintain scripts to automate patch and configuration deployments.
• Augment SIEM functionality and interconnect security controls.
• Create and maintain Splunk/ELK knowledge objects and dashboards.
• Produce vulnerability reports and patch impact analyses.
• Conduct cybersecurity audits and assess security posture.
• Support security engineering and testing of controls on systems and networks.
• Provide regular patch management status reports and metrics.

Skills

SPL

ELK

Python scripting

C++ programming

Unix scripting

PowerShell

SIEM

MITRE ATT&CK

Vulnerability assessment

Patch management

Cybersecurity auditing

Threat analysis

Network security devices

Education

Bachelor's degree in Software Engineering

Tools

Splunk

ELK

Qradar

AlienVault

Fortinet

Palo Alto

Snort

Suricata

WAF

Job description

Lackland Air Force Base, San Antonio, TX, USA •

Job Description

STS Systems Defense, LLC (SSD) is a government consulting and contracting firm supporting federal agencies and military installations across the U.S. SSS is seeking a Cyber Data Engineer to support our ongoing mission at Lackland AFB in San Antonio, TX.

What You'll Do

• Writeanddevelopscriptstoautomatethesysteminstallationofrequiredpatchesand configurationstoremediatedidentifiedsystemvulnerabilities.
• Perform coding and development as required to augment default SIEM functionality and facilitate the intercommunications of various security controls. (CDRL A007)
• Developsbasicnewcybersecuritycapabilities.(CDRLA007)
• Develop new and maintain existing Splunk, ELK or other search/analytics tool’s knowledge objects (Saved searches, reports, dashboards, data models, event types, field aliases, field extractions, macros, lookups, tags) to alert on potentially malicious activity or fulfill compliance/policy requirements. (CDRL A007)
• Develop,debugandmaintainscriptinglanguages.
• Create,installandtestvulnerabilityfixestoWindowsandUnix/Linuxplatforms.
• Assist/leadinconductingcybersecurityauditstoensureappropriateimplementationand complianceofthesecurityposture.
• Perform systems security engineering and test efforts associated with implementing security controls on networking devices, databases, operating systems, hardware, and software components.
• Developvulnerabilityreportsandinvestigationimpact,resolutionandverificationofsecurity vulnerabilitiesandpatches;aswellas,performingdeep‐diveandimpactanalysisintofailedpatch deployments.(CDRLA008)
• Develop and provide regular reports on patch management program and overall status of patch compliance. (CDRL A008)
• Perform and provide vulnerability assessment results and recommendations to the ESM Lead, and DO as necessary.
• Assess known systems vulnerabilities and verify system hardening and patching activities to ensure compliance with the most current applicable Security Technical Implementation Guides (STIGs)/Security Requirements Guides (SRGs) and related checklists with no more than a 5% error rate.
• Document, implement and prioritize patching requirements across the AFIN/AFNet enterprise. (CDRL A008)
• Provide OJT to other contractor employees, military, and/or civilian personnel, and ensure continuity folders/working aids are updated at least once per quarter in order to ensure efficient transition when personnel rotate.
• Maintain currency on latest industry trends and provide operational reports/assessments for development of tactics, techniques, and procedures. (CDRL A002)
• Create, document, and report metrics for analysis to improve weapon system processes and mission execution. (CDRL A009).
• Support operational leaderships tasking as it relates to Systems Security Engineer functions and responsibilities

What You Bring

• Must be a U.S. Citizen with an Active TS/SCI
• Graduates degree in Software Engineer
• More than 3 years of relevant work experience. BA/BS or MA/MS
• Proficient w/ Splunk Processing Language (SPL), ELK Lucene Query Syntax or other search/analytics tool.
• Proficient with programming/scripting fundamentals – including regex, C++, Python, RHEL, Unix Scripting, and Windows PowerShell is required.
• More than three (3) years of relevant work experience, including experience in responding to security problems in target‐rich environments, looking at security alerts, frontline analysis, and response.
• Understanding of SIEM "Search" Language & Lucene Query Syntax. Understanding of SIEM Dashboard, Reports, Lookup Tables, and Summary Indexes.
• Knowledge of knowing how to customize Dashboards via the XML source.
• Experience with SIEM Apps and ELK.
• Experience with Python Scripting. Programming experience in Python, C/C++, Java, or Go.
• Demonstrated expertise with malware analysis, including investigations of botnet and root‐kit behavior.
• Familiarity with information security concepts (OWASP Top 10, CVEs, IoCs, TTPs, Cryptography). Network Security Devices (IDS/IPS, NGFW, WAF, NGAV). OSSEC, Snort, Suricata Experience.
• Experience with at least one SIEM i.e Alienvault, Logrhythm, Splunk, Qradar , ELK and Firewalls such as Fortinet, Sonicwall, and Palo Alto.
• Scanning technologies, Log collection and analysis tools (SIEM).
• Experience with Scripting/Programming Languages (BASH, Python, Java, etc).
• Extensive knowledge of MITRE ATT&CK framework, and its uses within the cybersecurity community (e.g., Open Source projects).

What We Offer

SSD offers a competitive benefits package to include: paid holidays, paid time off including sick and vacation leave, medical, dental and vision insurance, flexible spending accounts, short and long term disability, company paid life insurance, 401(k) with a company match and discretionary profit sharing and tuition reimbursement.

Lackland Air Force Base, San Antonio, TX, USA,