SR. Systems Security Administrator
ARES is seeking a motivated, mission-oriented Sr. Security Operations Administrator in Alexandria, VA.
This is currently a HYBRID position supporting the US government. This position is expected to become fully onsite in the future.
As a Sr. Security Operations Administrator, you will oversee an enterprise level security operations center and are responsible for directing all activities reported by the team. The Sr. Security Operations Administrator on occasion develops bulletins, advisories, and reports from shared intelligence research and reporting.
Responsibilities include but are not limited to:
· Contributes to rule and signature creations for IDS/IPS strategies.
· Contributes with dashboard creations in Splunk for threat hunting for known common threat vectors and
· Advanced Persistent Threats (APT).
· Provide a point of interaction between government management, contractor management, and the SOC
· analysts.
· Identify and mitigate of CVEs within the environment.
· DISA STIG analysis and implementation.
· Perform vulnerability scanning through Tenable.
· Verify that proper delegation of duties among team members to satisfy all Service Level Agreement requirements.
· Evaluate work performed by team and to ensure that customer expectations are met.
· Manage and contribute to the completion of milestones related to multiple ongoing and simultaneous
· projects.
· Contributes to the development of a comprehensive training plan for all related cyber security
· operations.
· Work with the customer to create Standard Operating Procedures (SOPs), and Work Processes and
· Instructions solicit input from and provide guidance to the analysts regarding workflows and products.
· Liaison with customer with recommendations during development phase of Tabletop Exercises.
· Acts as an observer during Tabletop Exercises conducted by leads and analysts from each shift.
· Evaluate the effectiveness of the SOPs and Work Flows as well as gauge the capability and
· development of the analysts.
· Insuring the focal point of motivation and provides senior leadership mentoring to the analysts while
· achieving mission accomplishment.
· Command the workspace during major events and critical incidents.
Required qualifications:
· Minimum of 8 years' experience in a field directly related to Security Operation.
· CYSA certified
· Knowledgeable of IT operations, platforms, functions, and terminology.
· Demonstrated mastery of desktop systems and/or various software applications and concepts.
Preferred Qualifications:
· Splunk certification
· Tenable experience
· Security + certification
· Bachelor’s or master’s degree in an IT or Engineering
Security Clearance Requirement:
· US Citizenship
· Ability to obtain and maintain a Public Trust clearance