Cyber Data Engineer — SIEM, Analytics & Patch Automation

Ssd Anc; San Antonio (TX); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Tuition reimbursement

Medical and vision insurance

Paid holidays and PTO

Job summary

STS Systems Defense, LLC (SSD) is seeking a Cyber Data Engineer to support Lackland AFB in San Antonio, TX. You will write scripts to automate patching, enhance SIEM capabilities, and develop new cybersecurity features.

Responsibilities include vulnerability analysis, patch testing, and reporting of security posture for DoD systems. You will work with Splunk/ELK-based analytics, Python/C++ scripting, and various security tools, contributing to mission assurance and incident response at the

Qualifications

• U.S. citizenship with Active TS/SCI clearance is required.
• Bachelor's or higher in Software Engineering or related field.
• 3+ years of relevant cybersecurity experience in threat detection and response.
• Strong experience in SIEM, log analytics, and security monitoring tools.

Responsibilities

• Develop and maintain scripts to automate patch and configuration deployments.
• Augment SIEM functionality and interconnect security controls.
• Create and maintain Splunk/ELK knowledge objects and dashboards.
• Produce vulnerability reports and patch impact analyses.
• Conduct cybersecurity audits and assess security posture.
• Support security engineering and testing of controls on systems and networks.
• Provide regular patch management status reports and metrics.

Skills

SPL

ELK

Python scripting

C++ programming

Unix scripting

PowerShell

SIEM

MITRE ATT&CK

Vulnerability assessment

Patch management

Cybersecurity auditing

Threat analysis

Network security devices

Education

Bachelor's degree in Software Engineering

Tools

Splunk

ELK

Qradar

AlienVault

Fortinet

Palo Alto

Snort

Suricata

WAF

Job description

STS Systems Defense, LLC (SSD) is seeking a Cyber Data Engineer to support Lackland AFB in San Antonio, TX. You will write scripts to automate patching, enhance SIEM capabilities, and develop new cybersecurity features.

Responsibilities include vulnerability analysis, patch testing, and reporting of security posture for DoD systems. You will work with Splunk/ELK-based analytics, Python/C++ scripting, and various security tools, contributing to mission assurance and incident response at the