VDH Cyber Security Engineer (SIEM) (655675)

 

Job Title: VDH Cyber Security Engineer (SIEM) (655675)

Location: Richmond, VA

Duration: 12 Months

 

*local candidates mandatory

*interviews will be conducted via MS Teams or Google Meet.

*candidates will telework now (after coming to office to pick up laptop). Once restrictions are lifted, candidates will be required to work onsite daily M-F 8-5pm, NO exceptions

 

The Cyber Security Engineer with hands on SIEM tool experience.  The selected candidate  will work with agency ISOs to ensure that SIEM tools are appropriately configured and meet commonwealth security requirements.

 

Responsibilities:

•             Manage any SIEM projects including design, documentation, development, testing, and implementation of interfaces.

•             Investigates and resolves security incidents and recommends enhancements to improve security.

•             Engineer, implement, administer, and maintain a complex SIEM designed to meet security and compliance requirements and minimize system/data needs.

•             Drive projects and timelines from an agile environment perspective, as well as, leading and mentoring staff regarding the core principles of the SIEM tools.

•             Design, manage, administer and support SIEM tools to optimize searches & correlation of events for threat identification and alert generation in a shared environment.

•             Evaluates, tests, recommends, develops, coordinates, monitors, and maintains information security policies, procedures and systems, including hardware, firmware, and software.

•             Develop use cases, data models, and connectors within the SIEM to meet the overall objectives.

•             Configure rules and alerts for F5 Silverline Web Application Firewall (WAF) to SIEM tools.

•             Pulling and massaging data to create dashboards and content development to present to ISOs and others.

•             Creating thorough reports and documentation of all incidents and procedures; presenting findings to team and leadership on a routine basis.

•             Other duties as assigned to assist the Infrastructure Information Security Officer (ISO).

 

 

 

Skill	Required / Desired	Exp Need
• Manage any SIEM projects including design, documentation, development, testing, and implementation of interfaces.	Required	5
• Engineer, implement, administer, and maintain a complex SIEM designed to meet security and compliance requirements and minimize system/data needs.	Required	5
• Investigates and resolves security incidents and recommends enhancements to improve security. .	Required	5
• Drive projects and timelines from an agile environment perspective leading and mentoring staff regarding the core principles of the SIEM tools.	Required	5
Design, manage, administer and support SIEM tools to optimize searches & correlation of events for threat identification and alert generation.	Desired	5
• Develop use cases, data models, and connectors within the SIEM to meet the overall objectives.	Required	5
• Configure rules and alerts for F5 Silverline Web Application Firewall (WAF) to SIEM tools.	Desired	5
• Pulling and massaging data to create dashboards and content development to present to ISOs and others.	Required	5
Strong understanding of SIEM Architecture, incident response, and penetration testing in cloud environment.	Required	5
Hands on experience with SPLUNK, ELASTIC, SumoLogic, QRadar, ELK, or other SEIM tools to deploy and manage with design dashboards, etc	Required	5
Certified Information Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor, CRISC	Required	5

 

 

--

Thanks,

Jonna Sreenivas 

Operations Manager

1601 N Harrison Ave, STE # 2B, Pierre, SD 57501

Phone: 605-220-5981 ext 110 | Direct: 605-223-6768 | sjonna@my3tech.com

F: (605) 609-2010  | W: www.my3tech.com

Certified Minority Business Enterprise (MBE)

An E-Verify Company

DISCLAIMER: The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from any computer or if you want to be REMOVED please reply with REMOVE in the Subject line of this email.

--
You received this message because you are subscribed to the Google Groups "SureShotJobs" group.
To unsubscribe from this group and stop receiving emails from it, send an email to sureshotjobs+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/sureshotjobs/CAF9KwfkfML1kYzLP%2BYHxiKaH82LpLHuTwCJpcD0x89dy3uhe6Q%40mail.gmail.com.