Cybersecurity Engineer

DTRA CSSP Cybersecurity Engineer

The DTRA CSSP Cybersecurity Engineer serves as the principal technical authority responsible for the design, deployment, sustainment, and optimization of the CSSP's security toolsets and infrastructure. This engineering role is critical for leading complex, enterprise-wide SIEM migrations, orchestrating the secure ingestion and normalization of diverse subscriber data sources, and executing rigorous patch management on underlying CSSP infrastructure. By bridging the gap between advanced systems engineering and CSSP compliance, this engineer ensures continuous operational readiness, high-fidelity security telemetry, and strict adherence to JFHQ-DoDIN defensive mandates.

Key Responsibilities:

• Manage, configure, and optimize DTRA CSSP security toolsets to assist analysts in performing rapid initial triage and deep-dive alert investigations. Proactively engineer new technical solutions, develop dashboards to highlight critical network activity, and continuously monitor system utilization to prevent resource degradation.
• Design, propose, and implement configuration updates to existing CSSP infrastructure. Formally document all change proposals, draft technical drawings, and maintain precise records of system modifications to ensure strict alignment with organizational change control processes.
• Oversee the technical integration of new incoming subscribers into the central SIEM. Configure forwarders, APIs, and syslog collectors to securely ingest subscriber datasets, ensuring robust telemetry collection across all aligned networks.
• Deep technical experience executing SIEM migrations, developing parsing rules (regex), managing syslog aggregators, and mapping log ingestion frameworks to cybersecurity standards.
• Ensure all inbound subscriber log feeds are continuously validated, parsed, and normalized against the Splunk Common Information Model (CIM). Assist in the sustainment of machine learning solutions built on normalized datasets to improve defensive detection capabilities.
• Maintain host security for all Enterprise Security Linux systems within the CSSP. Apply routine vulnerability patches and enforce Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIG) to maintain a secure operating baseline.
• Partner closely with customer stakeholders, systems administrators, and leadership to validate engineering solutions. Create professional technical manuals, standard operating procedures, architectural network diagrams, training slide decks, and project reports.
• Demonstrated experience implementing cybersecurity engineering principles to meet Federal framework goals, validating complex technical solutions, and connecting business, system, and data flows.

Required Qualifications:

• Minimum of 2 to 8 years of progressive work experience in cybersecurity systems engineering, systems administration, or defensive infrastructure support.
• Bachelor of Arts (BA) or Bachelor of Science (BS) degree from an accredited college or university.
• Active Top Secret security clearance with SCI eligibility.
• DoD 8570/8140 Compliance:
  • IAT Level II
  • CSSP Infrastructure Support or equivalent certification
• Demonstrated experience implementing cybersecurity engineering principles to meet Federal framework goals. Proven track record of providing high-level technical drawings, validating complex technical solutions, and connecting business, system, and data flows.

Work Environment and Physical Demands:

• Location: Fort Belvoir, VA
• Type of environment: Professional office Environment
• Noise level: Medium
• Work schedule: Schedule is Monday - Friday (1200 - 2000). May be requested to work evenings and Holidays to meet program and contract needs.
• Amount of Travel: 1-2 weeks/annually (rare deployment occasions and training attendance)

Physical Demands:

• While performing the duties of this job, the employee is regularly required to use hands to handle, feel, touch; reach with hands and arms; talk and hear. The employee is regularly required to stand; walk; sit; climb or balance; and stoop, kneel, crouch, or crawl. The employee is regularly required to lift up to 10 pounds. The employee is frequently required to lift up to 25 pounds; and up to 50 pounds. The vision requirements include close vision, distance vision, peripheral vision, depth perception, and ability to adjust focus.

Work Authorization/Security Clearance:

• Active United States Citizenship is required.
• Must possess and maintain an active Top Secret security clearance with SCI eligibility.

Wage Information:

Target salary range: $120,000.00 - $170,000.00. The salary range displayed is an estimate only and is not a guarantee of compensation or salary, and will be determined on several factors regarding the individual's particular combination of education, knowledge, skills, competencies and experience, as well as contract parameters and organizational requirements. The displayed salary is one component of the total compensation package for employees.

Other Duties:

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice. TekSynap is a drug-free workplace. We reserve the right to conduct drug testing in accordance with federal, state, and local laws. All employees and candidates may be subject to drug screening if deemed necessary to ensure a safe and compliant working environment. Many positions require specific certifications and/or the ability to obtain a security clearance. Security clearances may only be granted to U.S. citizens. Applicants who accept an offer of employment may be subject to investigations performed by TekSynap and/or the Government to verify the candidate meets the required qualifications and other eligibility requirements.

Equal Employment Opportunity:

In order to provide equal employment and advancement opportunities to all individuals, employment decisions will be based on merit, qualifications, and abilities. TekSynap does not discriminate against any person because of race, color, creed, religion, sex, sexual orientation, gender identity, protected veteran status, national origin, disability, age, genetic information or any other characteristic protected by law (referred to as "protected status"). This nondiscrimination policy extends to all terms, conditions, and privileges of employment as well as the use of all company facilities, participation in all company-sponsored activities, and all employment actions such as promotions, compensation, benefits, and termination of employment. TekSynap is committed to ensuring that our online application process provides an equal employment opportunity to all job seekers, including individuals with disabilities. If you believe you need a reasonable accommodation in order to search for a job opening or to submit an application, please contact View email address on click.appcast.io for assistance.