Cyber Data Engineer

Lackland Air Force Base, San Antonio, TX, USA •

STS Systems Defense, LLC (SSD) is a government consulting and contracting firm supporting federal agencies and military installations across the U.S. SSS is seeking a Cyber Data Engineer to support our ongoing mission at Lackland AFB in San Antonio, TX.

• Writeanddevelopscriptstoautomatethesysteminstallationofrequiredpatchesand configurationstoremediatedidentifiedsystemvulnerabilities.
• Perform coding and development as required to augment default SIEM functionality and facilitate the intercommunications of various security controls. (CDRL A007)
• Developsbasicnewcybersecuritycapabilities.(CDRLA
  007)
• Develop new and maintain existing Splunk, ELK or other search/analytics tool’s knowledge objects (Saved searches, reports, dashboards, data models, event types, field aliases, field extractions, macros, lookups, tags) to alert on potentially malicious activity or fulfill compliance/policy requirements. (CDRL A007)
• Develop,debugandmaintainscriptinglanguages.
• Create,installandtestvulnerabilityfixesto
  
  Windows and
  
  Unix/Linux platforms.
• Assist/leadinconductingcybersecurityauditstoensureappropriateimplementationand complianceofthesecurityposture.
• Perform systems security engineering and test efforts associated with implementing security controls on networking devices, databases, operating systems, hardware, and software components.
• Developvulnerabilityreportsandinvestigationimpact,resolutionandverificationofsecurity vulnerabilitiesandpatches;aswellas,performing deep‐diveandimpactanalysisintofailedpatch deployments.(CDRLA
  008)
• Develop and provide regular reports on patch management program and overall status of patch compliance. (CDRL A008)
• Perform and provide vulnerability assessment results and recommendations to the ESM Lead, and DO as necessary.
• Assess known systems vulnerabilities and verify system hardening and patching activities to ensure compliance with the most current applicable Security Technical Implementation Guides (STIGs)/Security Requirements Guides (SRGs) and related checklists with no more than a 5% error rate.
• Document, implement and prioritize patching requirements across the AFIN/AFNet enterprise. (CDRL A008)
• Provide OJT to other contractor employees, military, and/or civilian personnel, and ensure continuity folders/working aids are updated at least once per quarter in order to ensure efficient transition when personnel rotate.
• Maintain currency on latest industry trends and provide operational reports/assessments for development of tactics, techniques, and procedures. (CDRL A002)
• Create, document, and report metrics for analysis to improve weapon system processes and mission execution. (CDRL A009).
• Support operational leaderships tasking as it relates to Systems Security Engineer functions and responsibilities

• Must be a U.S. Citizen with an Active TS/SCI
• Graduates degree in Software Engineer
• More than 3 years of relevant work experience. BA/BS or MA/MS
• Proficient w/ Splunk Processing Language (SPL), ELK Lucene Query Syntax or other search/analytics tool.
• Proficient with programming/scripting fundamentals – including regex, C++, Python, RHEL, Unix Scripting, and Windows Power Shell is required.
• More than three (3) years of relevant work experience, including experience in responding to security problems in target‐rich environments, looking at security alerts, frontline analysis, and response.
• Understanding of SIEM "Search" Language & Lucene Query Syntax. Understanding of SIEM Dashboard, Reports, Lookup Tables, and Summary Indexes.
• Knowledge of knowing how to customize Dashboards via the XML source.
• Experience with SIEM Apps and ELK.
• Experience with Python Scripting. Programming experience in Python, C/C++, Java, or…