Loading...
Mid LevelFull-timeRustAgile
Salary Range
$97,750 - $132,250 /year
This salary is estimated based on similar roles. The actual salary may vary.
About the Role
We are seeking a highly motivated and experienced Sensor and SIEM administrator to join our Defensive Cyber Infrastructure team at Agile Defense. This role is instrumental in protecting our organization by proactively operating and maintaining IDPS appliances and SIEM technologies.
Key Responsibilities
- →Perform IDPS installation and maintenance, working directly with customers to configure and install IPS and IDS sensors
- →Troubleshoot Intrusion Prevention Systems (IPS) and intrusion detection systems (IDS) for alerts and alarms
- →Generate weekly sensor reports and produce products based on sensor statistics
- →Configure SIEM by integrating various log types into the CSSP SIEM and monitoring data feed health
- →Collaborate effectively with internal teams, including Incident Response, Content and Development, and other security operations teams
- →Conduct weekly STIG checks on team-maintained appliances and servers, provide patch management, and update compliance repositories
- →Conduct comprehensive risk assessments to identify potential threats and vulnerabilities within the Defensive Cyber infrastructure division
Requirements
- ✓Minimum of 6+ years of experience in a dedicated Network administration or Server administration role
- ✓Strong understanding of IDPS technologies, SIEM technologies, and security best practices
- ✓Hands-on experience with security platforms and tools, including Trellix IPS appliances, Tipping point appliances, Suricata, or Palo alto next gen firewalls
- ✓Strong analytical and problem-solving abilities, with a capacity for critical and "outside-the-box" thinking
- ✓Excellent communication (written and verbal) and collaboration skills
- ✓Proven ability to work in a fast-paced security operations environment
- ✓Must be able to obtain/maintain a Secret T5. clearance
- ✓Candidates must possess one of the following valid certifications prior to start date: Security+ CE or higher, Certified Ethical Hacker (CEH) or CySA+.
