Command Post Technologies, Inc. (CPT) is seeking experienced Security Information and Event Management (SIEM) and Cybersecurity Engineers for anticipated opportunities supporting the Defense Advanced Research Projects Agency (DARPA) in Arlington, Virginia.
The selected candidate will support the engineering, configuration, integration, and sustainment of enterprise cybersecurity monitoring and defensive technologies. This position focuses on maintaining visibility across complex network environments, improving threat detection capabilities, and ensuring cybersecurity systems support operational and security requirements.
Candidates should possess hands-on experience with SIEM technologies, security event collection and correlation, network security infrastructure, and the integration of defensive cybersecurity tools.
Key Responsibilities
- Engineer, configure, integrate, and maintain SIEM and security monitoring capabilities across enterprise information systems.
- Support centralized collection, normalization, correlation, storage, and analysis of security logs and events.
- Develop and tune detection rules, alerts, dashboards, and reporting capabilities to identify suspicious activity and improve operational visibility.
- Integrate security data from firewalls, intrusion detection and prevention systems, servers, endpoints, directory services, and other network infrastructure.
- Troubleshoot security monitoring tools, resolve data collection and integration issues, and improve detection effectiveness.
- Support deployment, configuration, and sustainment of network security technologies, including firewalls, IDS/IPS, and endpoint protection systems.
- Coordinate with CND analysts, incident responders, network engineers, and system administrators to support cybersecurity operations.
- Assist with vulnerability management, security assessments, configuration validation, and remediation activities.
- Support security incident investigations by providing event data, correlation results, and technical analysis.
- Develop and maintain technical documentation, system configurations, operational procedures, and security monitoring reports.
- Ensure implemented security solutions align with applicable DoD cybersecurity requirements and approved system security baselines.
