Cyber Security Engineer (TS/SCI Required)

Support Cybersecurity personnel with installation, configuration, deployment, documentation and management of audit logging solution in support of larger Security Information and Event Management (SIEM) across NASIC's Cornerstone Networks, in support of the IC and AF auditing requirements.

Responsibilities

• Maintain and scale NASIC's auditing solution (currently Elastic Seach, Logstash, beats, and Kibana) across NASIC's Cornerstone Networks, in support of the IC and AF auditing requirements.

• Develop and document procedures/policies for NASIC to be compliant with Auditing guidance such as ICS 500-27 (Collection and Sharing of Audit Data).

• Provide technical support for investigations and inquiries upon request. Utilize NASIC's auditing solution, to create custom queries, searches, alerts, and dashboards.

• Identify and evaluate anolmalous and suspicious system and network activity, detect and assess network intrusions and malware behavior by incorporating, monitoring, and analyzing event logs across numerous device types (TCP/IP, packet analysis, Windows logs, syslogs).

• Utilize SIEM information with other tools such as Assured Compliance Assessment Solution (ACAS), HBSS, Solar Winds, and Paolo Alto.

• Identify coverage and efficiency gaps in security data and tooling.

• Notify Government Technical Monitor (GTM) of network intrusions and suspicious and anomalous events, and provide details as required within 1 business day of detection as directed by the NASIC Cybersecurity Incident Plan.

• Provide detailed operating process and training for items related to network monitoring.

• Participate in incident response and manage escalations as needed.

• Monitor metrics, and trend data related to network monitoring as directed by ICS 500-27.

• Provide monthly functional area reports summarizing work accomplished, work planned in enxt month and important issues occuring during the month.

Qualifications

• Possess and maintain Information Assurance Manaagement (IAM) Level I certification as required by Air Force Manual (AFMAN) 17-1303, Department of War (DoW) Directive 8140.01, and DoW 8570.01-M.

• 3+ years' experience operating or maintaining a SIEM solution such as Elastic Stack, ArcSight, or Splunk.

• Active TS/SCI

Job ID

Work Type

On-Site

Company Description

Work Where it Matters

Akima Global Technology (AGT), an Akima company, is not just another federal IT contractor. As an Alaska Native Corporation (ANC), our mission and purpose extend beyond our exciting federal projects as we support our shareholder communities in Alaska.

At AGT, the work you do every day makes a difference in the lives of our 15,000 Iñupiat shareholders, a group of Alaska natives from one of the most remote and harshest environments in the United States.

For our shareholders, AGT provides support and employment opportunities and contributes to the survival of a culture that has thrived above the Arctic Circle for more than 10,000 years.

For our government customers, AGT delivers new technologies and partners with leading edge commercial enterprises to deliver unique and innovative IT solutions.

As an AGT employee, you will be surrounded by a challenging, yet supportive work environment that is committed to innovation and diversity, two of our most important values. You will also have access to our comprehensive benefits and competitive pay in addition to growth opportunities and excellent retirement options.

We are an equal opportunity employer and comply with all applicable federal, state, and local fair employment practices laws. All applicants will receive consideration for employment, without regard to race, color, religion, creed, national origin, gender or gender-identity, age, marital status, sexual orientation, veteran status, disability, pregnancy or parental status, or any other basis prohibited by law. If you are an individual with a disability, or have known limitations related to pregnancy, childbirth, or related medical conditions, and would like to request a reasonable accommodation for any part of the employment process, please contact us at [email protected] or 571-353-7053 (information about job applications status is not available at this contact information).