Junior Cybersecurity Engineer

CSSP Cybersecurity Engineer

The DTRA CSSP Cybersecurity Engineer serves as a core technical authority responsible for the configuration, deployment, sustainment, and optimization of CSSP's security toolsets and infrastructure. This engineering role is critical for supporting CSSP infrastructure environment, collaborating on the secure ingestion and normalization of diverse subscriber data sources, and executing systematic patch management on underlying CSSP infrastructure. By bridging the gap between systems engineering and CSSP compliance, this engineer ensures continuous operational readiness, high-fidelity security telemetry, and strict adherence to JFHQ-DoDIN defensive mandates.

Key responsibilities include:

• Toolbox Management & Optimization: Support the configuration, optimization, and management of DTRA CSSP security toolsets to assist analysts in performing rapid initial triage and deep-dive alert investigations.
• Infrastructure Engineering & Documentation: Assist in the design and implementation of configuration updates to existing CSSP infrastructure, proposing technical adjustments, drafting technical drawings, and documenting change proposals in alignment with change control processes.
• Subscriber SIEM Ingestion: Support the technical integration of incoming subscriber networks into the central SIEM by configuring forwarders, APIs, and syslog collectors to securely ingest subscriber datasets and maintain robust telemetry.
• Data Normalization & CIM Compliance: Verify that inbound subscriber log feeds are continuously validated, parsed, and normalized against the Splunk Common Information Model (CIM), while assisting with machine learning models and security dashboards.
• Linux Security & STIG Implementation: Maintain host-level security for Enterprise Security Linux systems within the CSSP by deploying routine vulnerability patches and enforcing Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIG).
• Technical Collaboration & Reporting: Partner closely with customer stakeholders, system administrators, and team leads to validate engineering solutions and draft technical manuals, standard operating procedures, architectural network diagrams, and training slides.

Required qualifications include:

• Active Top Secret security clearance with SCI eligibility.
• Must possess an active DoD 8570/8140 IAT Level II baseline certification (e.g., Security+ CE) AND CSSP Infrastructure Support or equivalent certification.
• Minimum of 2 to 5 years of progressive work experience in cybersecurity systems engineering, systems administration, or defensive infrastructure support.
• Bachelor of Arts (BA) or Bachelor of Science (BS) degree from an accredited college or university. (Equivalent work experience may be considered in lieu of a degree).
• Demonstrated experience implementing cybersecurity engineering principles to meet Federal framework goals.
• Ability to provide high-level technical drawings, validate complex technical solutions, and map business, system, and data flows.

We are seeking a CSSP Cybersecurity Engineer to join our Prime Contract with the Defense Threat Reduction Agency.