Job Requirements
Hyattsville, MD
Public Trust Polygraph not specified
Mid Level Career (5+ yrs experience)
$120,000 - $145,000
Job Description
Cyber Security Administrator
Title: Cyber Security Administrator
Location: Onsite – New Carrollton, MD or Memphis, TN
Terms: Full-time
Salary: $120K - $150K
Clearance: Public Trust
Travel: 0% (onsite presence at client facilities as directed)
Position Description
We are seeking a senior Cyber Security Administrator to support containment, eradication, and recovery activities in a Security Operations Center (SOC) supporting a large federal agency across on-premises and cloud environments. This specialist implements and maintains operating systems and related software supporting cyber operations, carries out directed response actions on affected systems, accounts, networks, and services, and restores them to a secure operational state. The role may lead individuals assisting in the work. This position works weekday core operational hours, but may require evening, overnight, weekend, and holiday shifts in the case of an incident or emergency.
The successful candidate will:
• Carry out containment, eradication, and recovery actions quickly and accurately at the client’s direction.
• Restore affected systems and services to a secure operational state and help prevent recurrence.
• Keep systems patched, backed up, and recoverable.
• Document every response action completely for incident closure.
• Serve as the go-to specialist for system administration in the SOC and guide others assisting in the work.
Responsibilities:
• Recommend and implement client-directed containment actions for affected systems, accounts, networks, or services, such as isolating hosts, disabling accounts, and blocking access.
• Coordinate response actions with authorized technical teams, system owners, other contractors, vendors, and stakeholders.
• Support eradication of malicious activity, artifacts, unauthorized access, and persistence mechanisms from affected systems.
• Support recovery activities, including system rebuilds, data restoration from backups, patching, and secure reconfiguration, to restore affected systems and services to a secure operational state.
• Confirm completion of directed response actions and document results in client-approved systems.
• Prepare tactical configuration change documentation as soon as practical, within four hours of a change.
• Support incident closure by verifying that required remediation, reporting, and coordination actions are complete.
• Implement and maintain operating systems and related software supporting cyber activities, including platform and software patching.
• Establish and implement standards for computer operations, consistent with documented customer cyber policies, for hardware and software compatibility.
• Monitor system resources, troubleshoot system issues and outages, and aid in the design and implementation of backup and recovery processes.
• Schedule, perform, and monitor system backups, and perform data recoveries when necessary.
• Automate processes to streamline monitoring, troubleshooting, deployment, and maintenance.
• Lead and guide individuals assisting in the work.
Required Skills and Experience
• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field and 7+ years of relevant professional experience.
• Experience implementing and maintaining operating systems and related software, including platform and software patching, in support of cyber operations.
• Experience designing and implementing backup and recovery processes and performing data recoveries.
• Experience supporting incident containment, eradication, and recovery in an enterprise environment.
• Strong Windows and Linux system administration skills, including Active Directory.
• Scripting and automation skills (e.g., PowerShell, Bash, Python).
• Recognized as a specialist in the area of assignment, with experience leading others assisting in the work.
• Ability to work evening, overnight, weekend, and holiday shifts.
Desired
• Experience supporting federal government contracts as a contractor, including working to contract performance standards, deliverable schedules, and government review and approval processes.
• Experience working within federal change management processes.
• Experience with EDR, SIEM, and incident ticketing tools.
• Experience administering hybrid on-premises and cloud (AWS, Azure) environments.
• Certifications such as CompTIA Security+, CySA+, RHCSA, or Microsoft administrator certifications.
Work Authorization/Clearance: Must be a U.S. Citizen and able to obtain a Public Trust clearance.
Title: Cyber Security Administrator
Location: Onsite – New Carrollton, MD or Memphis, TN
Terms: Full-time
Salary: $120K - $150K
Clearance: Public Trust
Travel: 0% (onsite presence at client facilities as directed)
Position Description
We are seeking a senior Cyber Security Administrator to support containment, eradication, and recovery activities in a Security Operations Center (SOC) supporting a large federal agency across on-premises and cloud environments. This specialist implements and maintains operating systems and related software supporting cyber operations, carries out directed response actions on affected systems, accounts, networks, and services, and restores them to a secure operational state. The role may lead individuals assisting in the work. This position works weekday core operational hours, but may require evening, overnight, weekend, and holiday shifts in the case of an incident or emergency.
The successful candidate will:
• Carry out containment, eradication, and recovery actions quickly and accurately at the client’s direction.
• Restore affected systems and services to a secure operational state and help prevent recurrence.
• Keep systems patched, backed up, and recoverable.
• Document every response action completely for incident closure.
• Serve as the go-to specialist for system administration in the SOC and guide others assisting in the work.
Responsibilities:
• Recommend and implement client-directed containment actions for affected systems, accounts, networks, or services, such as isolating hosts, disabling accounts, and blocking access.
• Coordinate response actions with authorized technical teams, system owners, other contractors, vendors, and stakeholders.
• Support eradication of malicious activity, artifacts, unauthorized access, and persistence mechanisms from affected systems.
• Support recovery activities, including system rebuilds, data restoration from backups, patching, and secure reconfiguration, to restore affected systems and services to a secure operational state.
• Confirm completion of directed response actions and document results in client-approved systems.
• Prepare tactical configuration change documentation as soon as practical, within four hours of a change.
• Support incident closure by verifying that required remediation, reporting, and coordination actions are complete.
• Implement and maintain operating systems and related software supporting cyber activities, including platform and software patching.
• Establish and implement standards for computer operations, consistent with documented customer cyber policies, for hardware and software compatibility.
• Monitor system resources, troubleshoot system issues and outages, and aid in the design and implementation of backup and recovery processes.
• Schedule, perform, and monitor system backups, and perform data recoveries when necessary.
• Automate processes to streamline monitoring, troubleshooting, deployment, and maintenance.
• Lead and guide individuals assisting in the work.
Required Skills and Experience
• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field and 7+ years of relevant professional experience.
• Experience implementing and maintaining operating systems and related software, including platform and software patching, in support of cyber operations.
• Experience designing and implementing backup and recovery processes and performing data recoveries.
• Experience supporting incident containment, eradication, and recovery in an enterprise environment.
• Strong Windows and Linux system administration skills, including Active Directory.
• Scripting and automation skills (e.g., PowerShell, Bash, Python).
• Recognized as a specialist in the area of assignment, with experience leading others assisting in the work.
• Ability to work evening, overnight, weekend, and holiday shifts.
Desired
• Experience supporting federal government contracts as a contractor, including working to contract performance standards, deliverable schedules, and government review and approval processes.
• Experience working within federal change management processes.
• Experience with EDR, SIEM, and incident ticketing tools.
• Experience administering hybrid on-premises and cloud (AWS, Azure) environments.
• Certifications such as CompTIA Security+, CySA+, RHCSA, or Microsoft administrator certifications.
Work Authorization/Clearance: Must be a U.S. Citizen and able to obtain a Public Trust clearance.
group id: RTL189468
