Manage COTS & GOTS products to collect, display and remediate a variety of automated system security and system operations/performance functions and metrics.
Assist during security assessments of servers/network devices/security appliances.
Assist during security assessments with regard to accuracy and efficiency.
Assist with Creation of operational Operations and Maintenance (O&M) checklists to maintain the service (daily, weekly, monthly, yearly O&M checklists); build Tactics, Techniques and Processes (TTPs) and Standard Operating Processes (SOPs) associated with service checklists.
Manage and operate monitoring tools/capabilities with the enterprise security information and event management (SIEM) and create/tailor complex event alarms/rules and summary reports.
Execute cybersecurity operations procedures for day-to-day network management, operations and maintenance.
Monitor/analyze output of cybersecurity related tools for reportable security incidents and residual risk.
Assist in analyzing technical risk, upon request, of emerging cybersecurity tools and processes.
Work as part of a security incident response team as needed.
Assist ISSM/ISSO/ISSE with the Integration/Development new techniques to improve.
Confidentiality, Integrity, and Availability for networks/systems operating at various classification levels.
Confidentiality, Integrity, and Availability for networks/systems operating at various classification levels.
Advanced technical competency in one or more of the following supported platforms:
Microsoft Windows Server, Active Directory Red Hat Enterprise Linux servers, MS Hyper-V/VMWare/ESx/Xen Hypervisors, Enterprise networking/firewalls/intrusion detection/prevention systems, forensic analysis/vulnerability assessment, Group Policy management and configuration, Scripting, BMC Footprints, WSUS, , Lumension, Bitlocker, SQL Server 2012, TomCat, IIS, Windows Server 2012r2/2016, Win 10, Red Hat 6.5, Microsoft Office Toolkits, SEIMs, Logrhythm, ACAS/Nessus/SCAP, mandatory/role-based access control concepts (e.g. SE Linux extensions to RHEL, PitBull, AppArmor, and Sentris), video teleconferencing/VOIP, Oracle/MS SQL database security, and Apache/IIS Web server security.
Other Requirements
Thorough knowledge of Microsoft Windows desktop and server operating systems, Microsoft Exchange Server, and as needed RHEL operating systems administration and associated hardware