Cybersecurity Operations Specialist, SIEM Services

General Dynamics

Confirmed live today High trust

Quick summary

Work type
On-site
Location
Springfield, VA
Salary
$128,039–$173,229 / yr
Posted
116 days ago
Freshness
Confirmed live today

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $158k
This role $151k
$103k $205k
below market most similar roles pay here above market

This role pays less than 55% of similar roles. Most pay $122,968–$192,625 — the blue band above. At the midpoint, this role pays about $151k versus about $158k for comparable roles.

Based on 240 similar postings.

Employer

About General Dynamics

General Dynamics is a global aerospace and defense company offering a broad portfolio of products and services in business aviation, ship construction, land combat vehicles, and information technology. It serves customers in the U.S. government, allied governments, and a diverse array of commercial markets.

General Dynamics currently has 1377 open roles on FindRole.

Listed pay typically runs $124,093–$150,385 across 1184 roles with salary data.

Most-posted roles

View all roles at General Dynamics

At a glance

TL;DR · Cybersecurity Operations Specialist, SIEM Services

The Cybersecurity Operations Specialist -SIEM Services (Evergreen) joins the Cybersecurity Data Analysis Services team to manage and sustain the Security Information Events Management capability. This role involves designing, building, testing, and configuring log aggregation platforms, long-term analytics platforms, and cyber threat intelligence capabilities. You will perform preventative and corrective maintenance to ensure 99.99% system availability, manage vendor updates, and execute emergency maintenance actions. Key responsibilities include onboarding IT resources, ensuring audit event routing follows Intelligence Community Standards, and developing alerting rules and playbooks. You will utilize ArcSight SIEM, ElasticSearch, Kibana, and Linux (RHEL) to manipulate filters, tune queries, and troubleshoot event flows. The work focuses on ensuring data interoperability and parsing for ingestion into automated reporting systems like the Joint Incident Management System.

What you'll do

  • Design, develop, and maintain the Security Information Events Management (SIEM) capability and log aggregation platforms.
  • Perform preventative and corrective maintenance to ensure 99.99% system availability and reliability.
  • Detect and ticket degradations of SIEM data flows within 60 minutes of occurrence.
  • Execute scheduled maintenance, including installing patches, updates, and hardware configurations according to change management processes.
  • Develop and implement SIEM playbooks and alerting rules based on specific malicious event use cases.
  • Troubleshoot event flow, format, and parsing for ingestion into data storage and SIEM tools.
  • Configure and integrate assets to ensure data flows are properly parsed for internal and external automated reporting systems.
  • Use monitoring and visualization tools to track performance metrics and effectiveness for government staff.

What we're looking for

  • Must be a US Citizen.
  • Must currently possess an active Top Secret/SCI clearance.
  • Must be able to obtain a Top Secret SCI + Polygraph clearance.
  • Must have 6+ years of related experience.
  • Must have 6+ years of experience with SIEM and development projects.
  • Must have 6+ years of experience with SIEM support for projects and technical exchange meetings.
  • Must have 6+ years of experience developing and maintaining enterprise audit projects.
  • Active TS/SCI Clearance.

More like this

Similar roles

Cybersecurity Operations Specialist, SIEM Services

General Dynamics

St. Louis, MO 116 days ago $128,039–$173,229
ArcSight ElasticSearch Kibana Splunk Linux RHEL SIEM UBA Data Analytics Event Broker Cyber Threat Intelligence Log Aggregation Change Management Ticketing Systems Parsing Signature Development
6+ yrs exp

Security Information & Event Management (SIEM) SME

Leidos

Shiloh, IL +1 7 days ago $107,900–$195,050
SIEM Kibana Sentinel MDE Tines Darktrace Splunk Detection-as-Code Linux Windows Unix API Development TCP/IP Netflow Full Packet Capture Malware Analysis Cyber Kill Chain Scripting
8+ yrs exp

Cybersecurity Specialist

Leidos

Beavercreek, OH 162 days ago $107,900–$195,050
Nessus SCAP DISA STIGs JIRA Confluence Agile Vulnerability Management System Design CompTIA Security+ CISSP
8+ yrs exp

Cybersecurity Specialist

Abbott

Remote (Abbott Park, IL) 103 days ago
Cybersecurity NIST ISO 27001 IEC 62304 SDLC Threat Modeling Vulnerability Management Cloud Security Security Configuration Review CISSP CISM CEH Security+ GSEC Hybrid Cloud
5+ yrs exp Remote

Cybersecurity Specialist

Booz Allen Hamilton

Houston, TX 24 days ago
Network Security SIEM Firewalls IDS/IPS NIST ISO 27001 PCI-DSS Incident Response Threat Intelligence Vulnerability Assessment Big Data Analytics Information Systems Security Security Architecture Infrastructure Controls
10+ yrs exp