Top 99 Arcsight Jobs | SimplyHired

Cybersecurity Operations Specialist -SIEM Services (Evergreen)
General Dynamics Information Technology —St. Louis, MO
- $128,039 - $173,229 a year
- 6 years
- System design
- Mid-level
9d
Cybersecurity Operations Specialist -SIEM Services (Evergreen)
General Dynamics Information Technology —Springfield, VA
- $128,039 - $173,229 a year
- 6 years
- System design
- Mid-level
9d
Cyber & A&A Security Specialist - Hybrid Remote
ATTAINX INC —Silver Spring, MD
- $98,000 - $110,000 a year
- Hybrid work
- 5 years
- Writing skills
- Bachelor's degree
- Disability insurance
- Health insurance
Quick Apply
Digital Forensics Analyst ( Python, Splunk, Arcsight)
BAE Systems Inc. —Falls Church, VA
- $132,962 - $226,035 a year
- Full-time
- Hybrid work
- Computer Science
- Customer service
- 5 years
- Health savings account
- Paid holidays
Cybersecurity Engineer - Incident Response & Threat Detection
Fragomen —Remote
- Full-time
- Background check
- Azure
- Mid-level
Sec Incident Response Rep IV
University of Rochester —Albany, NY
- $29.05 - $40.67 an hour
- Full-time
- Remote
- Mid-level
- Analysis skills
- Bachelor's degree
SOC Analyst
Tactibit Technologies —Suitland, MD
- $0 a year
- Full-time
- Computer science
- Azure
- 6 years
Quick Apply
Purple Teamer Detection Engineer
black lantern security —Remote
- Remote
- Azure
- HIPAA
- Mid-level
Network Security Engineer
Uvation —Remote
- Contract
- Remote
- Computer Science
- Analysis skills
- Bachelor's degree
Quick Apply
Cyber Security Analyst
Tactibit Technologies —Suitland, MD
- $0 a year
- Full-time
- Azure
- Computer Science
- Bachelor of Science
Quick Apply
Cyber Operations Lead- Cloud/IaaS
Leidos —Hill AFB, UT
- $87,100 - $157,450 a year
- 8 hour shift
- AWS
- Analysis skills
- Bachelor's degree
Cybersecurity Analyst (SOC) - ACTIVE SECRET CLEARANCE REQUIRED
Cornerstone Technology —Seaside, CA
- $65,000 - $75,000 a year
- Weekends as needed
- Mid-level
- Office
- AWS
- Health savings account
- Health insurance
Quick Apply
9d
Cyber Data Analysis Engineer
CACI —Springfield, VA
- $82,100 - $172,400 a year
- Weekends as needed
- Computer Science
- System design
- Research
- Health insurance
Cyber Operations Lead- Cloud/IaaS
Leidos —Scott AFB, IL
- $87,100 - $157,450 a year
- 8 hour shift
- AWS
- Analysis skills
- Bachelor's degree
Cyber Operations Lead- Cloud/IaaS
Leidos —Whitehall, OH
- $87,100 - $157,450 a year
- 8 hour shift
- AWS
- Analysis skills
- Bachelor's degree
Cyber Data Analyst Engineer III
CACI —Springfield, VA
- $86,600 - $181,800 a year
- Weekends as needed
- System design
- Mid-level
- Windows
- Health insurance
Real Time Cyber Analyst
The Newberry Group —Ford Island, HI
- $95,000 - $125,000 a year
- Full-time
- Mid-level
- 3 years
- Analysis skills
- Paid holidays
- Disability insurance
Quick Apply
Security Specialist :
eKuber —Virginia
- Email
- Remote
- 6 years
- Bachelor's degree
- SharePoint
Cyber Security Engineer II
BAE Systems Inc. —Reston, VA
- $79,365 - $134,921 a year
- Full-time
- Hybrid work
- Computer science
- Computer Science
- Bachelor of Science
- Health savings account
- Paid holidays
Information Security Compliance Specialist
Tactibit Technologies LLC —Suitland, MD
- Full-time
- Computer Science
- Bachelor of Science
- Mid-level
Quick Apply

I want to receive the latest job alert for Arcsight

By signing in to your account, you agree to SimplyHired's Terms of Service and consent to our Cookie and Privacy Policy.

Explore jobs in more locations

Arcsight jobs near

Cybersecurity Engineer jobs in Reston, VA

Cybersecurity Engineer jobs in Remote

Senior Data Analyst jobs in Springfield, VA

Network Security Engineer jobs in Remote

Detective jobs in Remote

Cybersecurity Specialist jobs in St. Louis, MO

It Security Specialist jobs in Jersey City, NJ

It Security Specialist jobs in Illinois

Cyber Security jobs in Bakersfield, CA

It Security Specialist jobs in Texas

It Help Desk jobs in Levittown, PA

It Entry Level jobs in Kansas City, MO

It Security Specialist jobs in Columbia, SC

Cybersecurity Specialist jobs in Macon, GA

Cybersecurity Specialist jobs in Cedar Rapids, IA

Cybersecurity Specialist jobs in Honolulu, HI

Government Cybersecurity jobs in Washington State

Family Support Specialist jobs in Indianapolis, IN

Cybersecurity Specialist jobs in Colorado

Seo Specialist jobs in New York, NY

Cybersecurity Operations Specialist -SIEM Services (Evergreen)

General Dynamics Information Technology -
St. Louis, MO

Apply Now

Job Details

$128,039 - $173,229 a year
9 days ago

Qualifications

CSSP Analyst
Data storage
Data Integration (Data management)
Linux support
Configuration management
Maintaining data pipelines
Content development
Splunk
Log analysis tools
DoD 8570
IAT
System tuning
Query management
IAT Level II
Linux administration
Security system management
Network event correlation
Audit support
Data analysis software
IT security monitoring

Full Job Description

Your Impact

Own your opportunity to serve as a critical component of our nation’s safety and security. Make an impact by using your expertise to protect our country from threats.

Job Description

GDIT is seeking a motivated, career and customer-oriented Cybersecurity Operations Specialist to perform on our Cybersecurity Data Analysis Services team in At Louis, MO.

The team member shall provide cybersecurity data analysis services, which designs, develops, builds, tests, configures, employs, operates, integrates, sustains, and refreshes the Security Information Events Management (SIEM) capability (i.e. Enterprise Audit), long-term analytics platform, log aggregation platform, and the cyber threat intelligence capability, signature development and deployment, and reputation management services. This includes the onboarding of all new and existing IT resources, and ensuring the correct routing of all audit events to mission partners in accordance with Intelligence Community Standards (ICS) 500-27.

Job Duties Include:

Provide all preventative and corrective maintenance to ensure consistent, reliable, and secure service availability. This includes all actions required to return the service to full operational capability such as vendor RMA processes, removal and proper disposal of broken equipment/software, installation and testing of new equipment/software, and configuration of new equipment/software
Maintain system availability and reliability with a threshold of 99.99%
Detect and ticket degradations (volume/velocity) of all SIEM data flows within 60 minutes of the start of the degradation
Perform day-to-day maintenance, and specific scheduled maintenance activities that result from manufacturers recommended service intervals, alerts, bulletins, available patches, and updates according to agency approved change management processes. This includes maintaining updated documentation, change logs, and service bulletin libraries for all supported equipment and software in the CSOC knowledge management platform
Execute emergency maintenance actions with sufficient urgency to preclude unacceptable outage durations, approved by the Government prior to execution, and coordinated through and approved by CSOC and ESC government management
Perform all development, engineering, testing, integration, and implementation actions necessary for major vendor revisions
Perform continuous engineering assessments to improve the performance, effectiveness, coverage, and maturity of this service.
Retain documentation regarding loss of event logs (e.g. June 5-7th DNS logs were not ingested from SBU and are lost)
Configure all assets assigned to this service within the Government Furnished Information - Software Tools list in accordance with all Federal, DoD, IC, and NCE laws, directives, orders, polices, guidance, procedures etc.
Perform all development, design, engineering, testing, integration, and implementation actions needed for the total integration and interoperability between all applicable assets in the Government Furnished Information - Software Tools list. This includes ensuing all data flows are properly parsed for ingestion/transmission to internal and external automated reporting systems (e.g. JFHQ DoDIN – Joint Incident Management System, DoD CIO – DoD Scorecard/Get to Green reporting, IC CIO – Cybersecurity Performance Evaluation Model reporting, etc.)
Utilize agency approved ticketing systems to document, track, assign, update, and coordinate all engineering, integration, configuration, and maintenance actions
Use various monitoring, analysis, and visualization tools to track effectiveness, status, performance metrics, and other information as needed or required by Government staff and contractors assigned Cybersecurity Operations Services and Cybersecurity Readiness Services

Required Skills:

SIEM experience with one of the following ArcSight, ElasticSearch, Splunk, Event Broker, User Behavioral Analysis (UBA)
Experience providing support to Cybersecurity Operations Cell (CSOC) in creating alerting rules
Create SIEM playbooks
Linux (RHEL) Expert (administration and engineering)
Proficient in manipulating SIEM filters to better find and analyze potential malicious/atypical activity and reduce false positives
Experience with content development within ArcSight and Kibana to facilitate Cyber Analysts ability to investigate malicious events
Creation of ArcSight rules based on use cases of malicious events
Tuning and aggregation of queries and filters
Skilled in troubleshooting event flow through Enterprise Audit infrastructure
Skilled in troubleshooting event format and parsing for ingest into data storage and into SIEM tools

Active TS/SCI Clearance
DoW 8570.01-M IAT Level II and CSSP Infrastructure Support certifications
6+ years Experience with SIEM and Development Projects
6+ years Experience with SIEM support for projects and technical exchange meetings
6+ years Experience developing and maintaining enterprise audit projects

Desired Skills:

Kibana
Data Analytics

Work Requirements

Years of Experience

6 + years of related experience

may vary based on technical training, certification(s), or degree

Certification

Travel Required

None

Citizenship

U.S. Citizenship Required

Salary and Benefit Information

The likely salary range for this position is $128,039 - $173,229. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.
View information about benefits and our total rewards program.

Our Identity Verification Process

As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during virtual interviews. We reserve the right to take your picture to verify your identity and prevent fraud. By proceeding, you authorize the collection, processing, and use of your biometric data for identity verification and security purposes.

About Our Work

We are GDIT. A global technology and professional services company that delivers technology solutions and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50+ countries worldwide, offering leading mission-ready capabilities in AI, cloud, cyber and software development.

Join our Talent Community to stay up to date on our career opportunities and events at gdit.com/tc.

Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans

Apply Now

Refine Your Search

Arcsight jobs

Cybersecurity Operations Specialist -SIEM Services (Evergreen)

Cybersecurity Operations Specialist -SIEM Services (Evergreen)

Cyber & A&A Security Specialist - Hybrid Remote

Digital Forensics Analyst ( Python, Splunk, Arcsight)

Cybersecurity Engineer - Incident Response & Threat Detection

Sec Incident Response Rep IV

SOC Analyst

Purple Teamer Detection Engineer

Network Security Engineer

Cyber Security Analyst

Cyber Operations Lead- Cloud/IaaS

Cybersecurity Analyst (SOC) - ACTIVE SECRET CLEARANCE REQUIRED

Cyber Data Analysis Engineer

Cyber Operations Lead- Cloud/IaaS

Cyber Operations Lead- Cloud/IaaS

Cyber Data Analyst Engineer III

Real Time Cyber Analyst

Security Specialist :

Cyber Security Engineer II

Information Security Compliance Specialist

I want to receive the latest job alert for Arcsight

Explore jobs in more locations

Job Seeker Tools

Employer Tools

Browse

Stay Connected