Cybersecurity Systems Administrator

General Dynamics Information Technology is seeking a Cybersecurity Systems Administrator to provide cyber technical support for U.S. Central Command in Tampa, FL (onsite).

Responsibilities

• Partner with cybersecurity stakeholders to define and implement configurations for SIEM, EDR, and network access control solutions.
• Customize and optimize SIEM alert rules, correlation searches, and detection mechanisms to align with security requirements and organizational objectives.
• Deploy new SIEM instances, including clustered deployments and SIEM apps.
• Fine-tune EDR policies, rulesets, and scanning parameters to improve endpoint visibility and threat detection.
• Configure network access control policies for comply-2-connect to enforce security posture and reduce risk from unauthorized devices.
• Support Linux environments, including editing and maintaining Splunk configuration files and Splunk apps.
• Collaborate with Cybersecurity Engineering and interact with end users to gather requirements, troubleshoot issues, and support creation of Splunk search queries and dashboards.
• Integrate cyber tools with a variety of legacy data sources.
• Perform routine maintenance: software updates, patches, and performance tuning.
• Provide timely support and troubleshooting for SIEM, EDR, C2C, and SOAR platform issues and incidents, including coordination with vendors or higher-level support when needed.
• Run regular system audits and health checks to identify vulnerabilities, misconfigurations, and performance issues, then implement corrective actions.
• Provide occasional presentations of tool capabilities to leadership.
• Develop and enforce configuration standards, security policies, and operational procedures to support compliance with regulatory requirements and industry best practices.
• Monitor compliance through audits, assessments, and reporting; take corrective actions for deviations or gaps.
• Work with compliance and audit teams to streamline regulatory compliance efforts and demonstrate adherence to security standards.
• Integrate cybersecurity systems with other security controls, data sources, and IT infrastructure components.
• Build and maintain automation scripts, playbooks, and workflows within the SOAR platform to automate routine tasks and orchestrate incident response processes.
• Identify opportunities for continuous improvement through automation, orchestration, and integration with emerging technologies and industry trends.
• Deliver training and document processes to help internal teams effectively use cybersecurity systems.
• Share expertise, best practices, and lessons learned with colleagues through formal and informal knowledge sharing.

Requirements

• Proficiency in Linux environments, including system administration tasks and shell scripting for automation and customization.
• Solid understanding of cybersecurity principles, threat landscapes, and best practices for configuring and tuning security tools.
• Strong analytical and attention to detail skills; ability to troubleshoot complex technical issues and optimize performance.
• Excellent communication and collaboration skills for working with technical and non-technical stakeholders.
• Demonstrated ability to work independently, prioritize tasks, and meet deadlines in a dynamic environment.
• Bachelor’s degree in Information Systems, Computer Science, Computer Engineering, or related field.
• Relevant certifications (examples provided): Security+, CISSP, GIAC, Splunk Core Certified Power User.
• 3 to 5+ years of cybersecurity administration experience focused on SIEM, EDR, network access control, and SOAR platforms.
• Security clearance level: TS/SCI (Top Secret/SCI listed).
• CompTIA Security+ CE.
• U.S. citizenship required.
• Travel: less than 10%.
• U.S. Citizenship Required.

Technologies

• Linux, shell scripting
• SIEM, Splunk
• Splunk search queries and dashboards
• Splunk configuration files and apps
• EDR
• Network access control, Comply-to-Connect (comply-2-connect)
• SOAR

Benefits

• AI-powered career tool that identifies career steps and learning opportunities
• Internal mobility team focused on helping you achieve your career goals
• Comprehensive benefits and wellness packages
• 401K with company match
• Competitive pay and paid time off
• Award-winning culture of innovation and a military-friendly workplace

Salary range: USD 105,400 - 142,600 per year.

Location: Tampa, Florida (Onsite Workplace). Req#: RQ230499

Requisition type: Regular.

Category: Cyber and IT Risk Management.

Work requirements (years): 3 + years of related experience (may vary based on technical training, certification(s), or degree).

Clearance level: Top Secret/SCI.

Identity verification process: Virtual interviews require you to be on camera. The company may take your picture to verify your identity and prevent fraud. By proceeding, you authorize collection, processing, and use of biometric data for identity verification and security purposes.