About the job
Job Description:
The Cybersecurity Tools Administrator plays a vital role in proposing, developing, installing, managing, operating, maintaining, integrating, and configuring a comprehensive suite of cybersecurity tools that enhance network cybersecurity operations across various programs. These tools deliver layered protection across endpoints, peripherals, data, email, web, and networks, functioning effectively within environments such as CorpsNet, SIPRNet, cloud platforms, DMZ segments, network boundaries, and endpoint devices. This position supports defensive cyberspace operations and the complete incident response lifecycle by ensuring essential capabilities—including threat detection and prevention, traffic segmentation controls, data rights management, compliance to connect, SIEM, vulnerability scanning, and security operations infrastructure—are fully operational, finely tuned, and securely maintained.
The Work:
- Propose, install, configure, integrate, and maintain cybersecurity tools across diverse environments (CorpsNet, SIPRNet, cloud, DMZ, boundary networks).
- Oversee the operation and continuous tuning of cybersecurity tools to support endpoint, network, email, data, and web protection.
- Monitor resource utilization and system performance, ensuring tools remain operational, efficient, and securely configured.
- Assist in the deployment of new cybersecurity solutions and the upgrading of existing toolsets.
- Maintain secure configurations, backups, and documentation for all security tools.
- Develop and sustain cybersecurity security plans, diagrams, and associated artifacts.
- Integrate SIEM data to ensure proper log and telemetry flow, aiding in threat detection and incident response.

