Cyber Defense Lab Manager & Tool Administrator

STOPSO; Fayetteville (NC); On-site; USD 110,000 - 140,000; Full time

Job summary

STOPSO seeks a Tool Administrator and Lab Manager to support the USARC DCOMSS program at Fort Bragg, NC. Sustain cyber defense sensors, SIEM infrastructure, logging pipelines, and approved test environments.

The role maintains reliable, documented configurations and safe testing of cyber tools. Responsibilities include administering SIEM and tools, patch management, and lifecycle planning for a government-approved DCO lab.

Qualifications

• Minimum 3 years of documented relevant experience in cyber tooling, SIEM sustainment, and lab operations.
• DCWF 521 Intermediate proficiency required; DoD qualification standards must be met.
• DoD 8140.03 qualification path must be completed for work roles; document appointment and qualification.

Responsibilities

• Administer SIEM, sensors, log collection, data-source onboarding, parsing, and platform health monitoring.
• Troubleshoot faults, coordinate maintenance, apply approved patches and configuration baselines, document changes.
• Manage tool authorization records, STIG or SRG implementation, upgrade testing, rollback, and lifecycle planning.
• Maintain an isolated Government-approved DCO lab with documented access, separation, inventory, backup, and operating procedures.
• Support malware-analysis and OSINT tooling in the lab within approved network boundaries.
• Coordinate with Blue Team, CTI, and Government platform owners on outages, enhancements, and risks.

Skills

Cyber defense

SIEM

Lab management

Virtualization

Education

DCWF 521 Cyber Defense Infrastructure Support Specialist (Intermediate)

Security+ or similar certifications

Tools

STIG tools

SIEM platforms

Lab management systems

Job description

STOPSO seeks a Tool Administrator and Lab Manager to support the USARC DCOMSS program at Fort Bragg, NC. Sustain cyber defense sensors, SIEM infrastructure, logging pipelines, and approved test environments.

The role maintains reliable, documented configurations and safe testing of cyber tools. Responsibilities include administering SIEM and tools, patch management, and lifecycle planning for a government-approved DCO lab.