Apply on Employer Site

Castalia Systems · 4 months ago

Security Information Event Manager (SIEM) Administrator

Camp Smith , HI

Full-time

Onsite

Mid, Senior Level

$106K/yr - $118K/yr

4+ years exp

Castalia Systems is a proven business partner providing mission critical solutions to the Federal Government. The Security Information Event Manager (SIEM) Administrator is responsible for managing the organization's SIEM system using Splunk, implementing and optimizing it for effective security monitoring and incident response.

AnalyticsArtificial Intelligence (AI)RoboticsSoftware

Growth Opportunities

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Implement, install, and troubleshoot Splunk Enterprise (SE) and Splunk Enterprise Security (ES) systems

Maintain and administer SE and ES configurations, indexes, apps, and knowledge objects

Monitor system health, capacity, and performance to proactively address issues

Configure new data inputs to expand data collection capabilities

Create security dashboards, reports, alerts, and notifications

Collaborate with system administrators to enhance security monitoring capabilities

Perform updates and patches on the Splunk platform

Audit and review security practices to prevent security incidents

Maintain documentation of system configurations and changes

Qualification

Splunk administrationSIEM Content DevelopmentLinux server administrationIAM-II CertificationSplunk Enterprise Certified AdminAnalytical skillsProblem-solving skillsCommunication skillsCollaboration skills

Required

High School Diploma

At least 4+ years of system, network administration, or developer experience and 2+ years of Splunk administration. A Bachelor's degree in Computer Science can be considered in lieu of the 4 years of system/network admin or developer experience

IAW DoD 8140.03-M, must meet the Intermediate Proficiency Level qualifications

IAM-II Certification (one or more of the following): CISM, CISSP (OR ASSOCIATE), GSLC, CCISO, CAP, CASP+ CE, HCISSP

Must have Splunk Enterprise Certified Admin credential

Must have experience administering Linux servers

Must have experience with SIEM Content Development

Demonstrated experience of strong analytical and problem-solving skills

Excellent communication and collaboration skills