PD ALTESS provides Information Management policy, guidance, automation, support and services to the Army Acquisition Executive (AAE) and the Office of the Assistant Secretary of the Army for Acquisitions, Logistics and Technology (ASA(ALT)) and provides information management support and services to other DOD and Army elements, and the Acquisition Community in support of the AAE mission.This position is for a Cybersecurity Technical Administrator supporting the ALTESS Cybersecurity Incident Response Team.This position can be performed primarily remotely but does require the ability to be on site in Radford VA up to one week per month.ALTESS is a hosting provider for Army IT systems providing various levels of sustainment support for our hosted systems. ALTESS is also a managed service provider (MSP) for Army IT systems and we support enterprise applications owners in migrating their systems into Microsoft Azure. We also provide sustainment services to support their applications. This position is for a cybersecurity technical administrator role to support a full range of cybersecurity services that ALTESS provides to our customers.JOB DUTIES:• As part of the Cybersecurity Division - Cyber Incident Response Team deploy install manage and operate Security Information and Event Management (SIEM) solutions to include Splunk and/or Elasticsearch.• Responsible for assessment of threats and vulnerabilities to organizational computing assets and developing/integrating rules queries and filtering techniques to produce meaningful risk analysis for responses.• Coordinate with PD ALTESS team to ensure all devices and components report all relevant logs to the SIEM solution and perform troubleshooting and maintenance of assets.• Monitor DoD and Army web application security standards and best practices as well as reported/disclosed vulnerabilities. Work with internal and external customers to track remediate and report compliance for disclosed vulnerabilities.• Work with a team to review Army Cyber Tasking Orders (CTOs) determine applicability and response and incorporate required changes.• Validate technical security controls are in place for operating systems applications and network appliances and recommend enhancements.• Review proposed SIEM configuration changes for security impact.• Work with technical and policy teams to implement maintain and monitor technical security configuration controls including: STIGs SRGs and other industry security hardening guidance.• Collaborate with internal and external parties to transform high-level technical objectives into comprehensive technical requirements.• Interact with Army Cyber Security Service Providers and customer ISSOs/ISSMs on a regular basis.*** This position requires the ability to obtain a Secret Security clearanceor higher (US Citizenship is required) ***
