Current jobs related to AvMC EITSS SIEM - Huntsville - COLSA


  • Huntsville, Alabama, United States COLSA Full time

    Job SummaryCOLSA Corporation is seeking a highly motivated and experienced Systems Analyst to support Virtualization and Cloud Platform efforts on our Army Aviation and Missile Center (AvMC) Enterprise Information Technology Support Services (EITSS) contract.Key ResponsibilitiesDesign, implement, and maintain IT infrastructure in a high-security, Department...


  • Huntsville, United States COLSA Full time

    General Summary COLSA Corporation is seeking an experienced and motivated Virtualization Systems Engineer to support Virtualization and Cloud Platform efforts on our Army Aviation and Missile Center (AvMC) Enterprise Information Technology Support Services (EITSS) contract. The ideal candidate will possess demonstrated experience in VMware technologies to...


  • Huntsville, United States Mount Indie Full time

    General Summary: Mount Indie is looking for a Security Information and Event Management (SIEM) analyst for the AvMC contract. The candidate should have a background in cybersecurity compliance monitoring tools such as Elastic and Splunk, as well as extensive Linux system administration knowledge. The candidate will provide support and administration for...


  • Huntsville, Alabama, United States Mount Indie Full time

    Job Title: SIEM (Elastic) AdministratorMount Indie is seeking a highly skilled SIEM (Elastic) Administrator to join our team. As a key member of our cybersecurity team, you will be responsible for the administration, maintenance, and troubleshooting of our ElasticSearch environment on RHEL servers.Key Responsibilities:Administer, maintain, troubleshoot, and...


  • Huntsville, Alabama, United States Mount Indie Full time

    Job SummaryMount Indie is seeking a highly skilled Cybersecurity Compliance Specialist to join our team. The ideal candidate will have a strong background in SIEM (Elastic) Administration and extensive experience with Linux system administration.The successful candidate will be responsible for providing support and administration for our current DoD Splunk...


  • Huntsville, Alabama, United States Mount Indie Full time

    Job Summary:Mount Indie is seeking a highly skilled SIEM (Elastic) Administrator to support the AvMC contract. The ideal candidate will have a strong background in cybersecurity compliance monitoring tools, including Elastic and Splunk, as well as extensive Linux system administration knowledge.Key Responsibilities:Administer, maintain, troubleshoot, and...


  • Huntsville, Alabama, United States Mount Indie Full time

    Job DescriptionMaintain and support the IT infrastructure of Mount Indie's Army Aviation and Missile Center (AvMC) Enterprise Information Technology Support Services (EITSS) contract. The ideal candidate will have experience in VMware vSphere, vRealize Suite, ESXi, Windows Server, Linux, and DoD STIGs. Key responsibilities include designing, implementing,...


  • Huntsville, Alabama, United States COLSA Full time

    Job SummaryCOLSA Corporation is seeking an experienced Virtualization Systems Engineer to support Virtualization and Cloud Platform efforts on our Army Aviation and Missile Center (AvMC) Enterprise Information Technology Support Services (EITSS) contract. The ideal candidate will possess demonstrated experience in VMware technologies, including vCloud...


  • Huntsville, Alabama, United States Colsa Full time

    Job SummaryWe are seeking a highly motivated Systems Analyst to support Linux administration efforts on our Army Aviation and Missile Center (AvMC) Enterprise Information Technology Support Services (EITSS) contract. The ideal candidate will be responsible for servicing user-submitted Help Desk tickets and assisting senior members of the team with testing...


  • Huntsville, Alabama, United States COLSA Full time

    Job Summary:COLSA Corporation is seeking an experienced Systems Analyst to support Virtualization and Cloud Platform efforts on our Army Aviation and Missile Center (AvMC) Enterprise Information Technology Support Services (EITSS) contract.The ideal candidate will possess demonstrated experience in VMware vSphere, vRealize Suite, ESXi, Windows Server, Linux,...

AvMC EITSS SIEM

2 months ago


Huntsville, United States COLSA Full time
Job Description

General Summary:

COLSA is seeking a Security Information and Event Management (SIEM) analyst for the AvMC contract. Candidate should have a background in cybersecurity compliance monitoring tools such as Elastic, Splunk, etc., and extensive Linux system administration knowledge.

Candidate will provide support and administration for transitioning current DoD Splunk environment to Elastic (ELK). Duties include but not limited to Linux platform administration, dashboard creation, and architecture enhancements needed in a dynamic environment. Candidate needs to possess understanding of evaluating, maintaining, and sustaining current SIEM related tools with possibility of other software evaluations. Candidate must have strong communication skills, work in a team environment to include mentoring more junior team members and understand both server backend and application frontend configurations.

Principal Duties and Responsibilities (*Essential Functions):

•Administer, maintain, troubleshoot, and support an ElasticSearch environment on RHEL (Red Hat Enterprise Linux) servers on-premises.

•Tune and optimize systems and data sources to better align with the organization's strategic Integrated Operating Center goals.

•Ensure the Elasticsearch configurations continue to run under optimal conditions.

•Develop dashboards and applications with custom JavaScript, HTML and CSS features to fulfill dynamic organizational requirements with visual metrics for stakeholders.

•Onboard new data sources, parse, and extract relevant data while also monitoring license usage.

•Create data retention policies and perform index administration, maintenance, and optimization.

•Complete/Maintain STIG configuration checklists of Elastic deployment to support Army and DoD requirements.

•Configure Elastic infrastructure to utilize trusted DoD certificates for all communication.

•Develop customized Elasticsearch queries, filters, and visualizations to meet customer requirements.

•Work with AvMC CIO G6 teams to identify inefficiencies in current monitoring services, propose and implement changes to streamline alerts or automate remediations.

At COLSA, people are our most valuable resource and centered at our core value. We invite you to unite your talents with opportunity and be a part of our "Family of Professionals" Learn about our employee-centric culture and benefits here.

Required Experience

Required Qualifications
  • Bachelor's degree in related field, or the equivalent experience.
  • Minimum of 8 years' work-related experience.
  • Working knowledge of Elasticsearch, Logstash, and Kibana (ELK Stack), including configuration, optimization, and troubleshooting.
  • Active CompTIA Security+ CE certification
  • U.S. Citizenship required; must be able to obtain/maintain a DoD Secret clearance.
  • Implementation of security best practices and ensure compliance with relevant regulations and standards (e.g., DISA STIGs) within the Elastic environment.
  • Work related experience within DoD.
  • Strong and effective communication skills
Preferred Qualifications
  • Active DoD Secret clearance
  • Working knowledge of scripting languages for automation and customization.
  • Understanding of application performance concepts, VMware, Linux and Windows operating systems, and network infrastructure concepts.
  • Working knowledge with Elastic Stack solutions
  • Hands-on Linux system administration
  • Working knowledge of ACAS scanning

Applicant selected will be subject to a government security investigation and must meet eligibility requirements for access to classified information. COLSA Corporation is an Equal Opportunity Employer, Minorities/Females/Veterans/Disabled. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin.

#crit