Cyber Data Analysis Engineer

Overview Abile Group has an exciting and challenging opportunity for a Cyber Data Analysis Engineer on a contract providing Network and Cybersecurity services supporting an Intelligence Community customer. All the personnel on the team will work together to support transport and cybersecurity information technology (IT) services on multiple networks and security domains, at multiple locations worldwide, inclusive of new facilities and building constructions to support the IC mission. The right candidate will possess the belowskills and qualificationsand be ready to handle all responsibilities independently and professionally. Responsibilities Resolves escalated issues and perform root cause analysis for complex issues. Has ability to communicate with program SMEs as well as other customers with less technical backgrounds. Demonstrates a high attention to detail, examining every aspect of the system. Able to multi-task, working with several different customers in various stages of onboarding process. Applies Configuration Management disciplines to maintain hardware/software revisions, security patches, hardening, and documentation. Coordinates and conducts event collection, log management, event management, compliance activities, and identity monitoring activities for the customer's system. Works with other Service Providers to support areas of common interest. Provides all preventative and corrective maintenance to ensure consistent, reliable, and secure service availability. Maintains system availability and reliability with a threshold of 99.99%. Detects and tickets degradations (volume/velocity) of all SIEM data flows within 60 minutes of the start of the degradation. Performs day-to-day maintenance, and specific scheduled maintenance activities that result from manufacturers recommended service intervals, alerts, bulletins, available patches, and updates according to agency approved change management processes. Executes emergency maintenance actions with sufficient urgency to preclude unacceptable outage durations, approved by the Government prior to execution, and coordinated through and approved by CSOC and ESC government management. Performs all development, engineering, testing, integration, and implementation actions necessary for major vendor revisions. Retains documentation regarding loss of event logs (e.g. June 5-7th DNS logs were not ingested from SBU and are lost) Configures all assets assigned to this service within the Government Furnished Information - Software Tools list in accordance with all Federal, DoD, IC, and NGA laws, directives, orders, polices, guidance, procedures etc. Utilizes agency approved ticketing systems to document, track, assign, update, and coordinate all engineering, integration, configuration, and maintenance actions. Qualifications Clearance Required: TS/SCI with ability to pass and maintain a Government Polygraph (post-hire requirement). Degree and Years of Experience: Bachelor’s degree in a technical field. 5+ years of Systems Engineer or similar experience. Required Certifications: IAT II certification and obtain CSSP Infrastructure Support certification 120 days of hire. Required Skills: Possesses a strong work ethic, be self-directed, and be a detail-oriented professional. Willing to learn and adapt to new, cutting‑edge technologies. Possess excellent time management skills and the drive to work unsupervised. Demonstrated ability to use problem‑solving techniques such as root cause analysis to resolve issues. Advanced Linux proficiency. Knowledge of network communication principles, common infrastructure components (IPAM, DNS, DHCP), load balancers, firewalls, virtual and physical infrastructure design. Experience with hypervisors such as VMware ESXi, Citrix XenServer, Microsoft Hyper‑V. Advanced knowledge of systems engineering principles, methods, and techniques. Desired Skills: Experience with public clouds such as AWS, Google, Rackspace. Experience with private clouds such as VMWare, OpenStack. Strong background in Unix, or Windows servers. Experience with SIEM technologies such as Elastic, Splunk, and/or ArcSight. Familiarity with Cribl data aggregation/normalization technology. Scripting experience with Python, Bash, and/or Powershell. #J-18808-Ljbffr