RHEL Systems Administrator for SOC & SIEM Ops

UltraViolet Cyber; Herndon (VA); Hybrid; USD 90,000 - 130,000; Full time

Job summary

UltraViolet Cyber is seeking a RHEL system administrator / infrastructure engineer to support a SOC Engineering team. You will handle RHEL provisioning, patching, STIG compliance, backups, and configuring hardware/software to support new capabilities.

Active Secret Clearance and 1–2 days/week onsite in Herndon, VA are required. The role involves collaboration with analysts and engineers to align telemetry ingestion with detection and compliance needs.

Qualifications

• US Citizenship is Required.
• Active Secret Clearance is Required.
• Hands-on experience administering Cisco network devices in production environments.
• Experience with GIT, and DevOps principles.
• Experience using and writing Ansible scripts to manage RHEL hosts.
• Familiarity with Splunk Enterprise Security, CIM, data models, and security content dependencies.
• Experience with cloud infrastructure AWS, Azure, Microsoft 365, identity platforms, EDR, firewalls, and network security tools.
• Familiarity with regex, JSON parsing, syslog, and API-based log collection.

Responsibilities

• 4+ years of hands-on experience administering and engineering RHEL servers in production environments.
• Support a SOC, SIEM, or cyber defense environment.
• Collaborate with analysts and engineers to align telemetry inges on with detection, monitoring, and compliance requirements.

Skills

RHEL administration

SIEM experience

Bash

Python

Ansible scripting

Windows administration

Git & DevOps

Regex & JSON parsing

Syslog & API logs

Tools

Splunk Enterprise Security

CIM

Data models

Security content

Ansible

AWS

Azure

Microsoft 365

EDR

Job description

UltraViolet Cyber is seeking a RHEL system administrator / infrastructure engineer to support a SOC Engineering team. You will handle RHEL provisioning, patching, STIG compliance, backups, and configuring hardware/software to support new capabilities.

Active Secret Clearance and 1–2 days/week onsite in Herndon, VA are required. The role involves collaboration with analysts and engineers to align telemetry ingestion with detection and compliance needs.