Cyber Security Incident and Event Management/Elastic Specialist Job at Diligent Consulting, Remote

cDNlbE1RSVBIOXQ0WGFjVC8yTytNK2R5alE9PQ==
  • Diligent Consulting
  • Remote

Job Description


US CITIZEN ONLY. SECRET CLEARANCE REQUIRED. MUST HAVE IT-II CERT (IE SECURITY+)

SIEM/Elastic Specialist will:

• Be responsible for designing & setting up the ingestion of various customer data flows to include pre-processing data into a useable format, ensuring proper parsing and indexing
• Collaborate with cross-functional teams and responsible for designing & integrating Elastic with a wide variety of data sources and developing associated knowledge objects such as queries, dashboards, reports, alerts for monitoring and analytics
• Perform data transformation using Elastic query language 
• Track the health of the Elastic environment and optimize its performance. Troubleshoot and resolve issues related to security, performance, data indexing, and searches
• Perform watch-officer monitoring duties, including:
○ monitoring, detecting, investigating, and responding to cybersecurity threats and events using Elastic /SIEM Platform
○ Reviewing correlated alerts and logs for compromise scenarios
○ Performing triage of security alerts to prioritize response
○ Identifying false positives
○ Investigating security incidents and determining root cause
○ Collecting and preserving logs for analysis
○ Escalating confirmed incidents to leadership or SOC teams
○ Coordinating with IT or DevOps for containment and remediation
○ Creating after-action reports (AAR) post-incident
• In addition, the role may include assistance with monitoring Vulnerability Management tools, such as ACAS and ePO.

QUALIFICATIONS:

• Have at least three years of working knowledge and hands-on experience with Elastic/Splunk query languages, monitoring SIEM dashboards and real-time alerts, fine-tuning SIEM rules to reduce noise, and NIST 800-53 & DevSecOps frameworks

Job Tags

Full time

Similar Jobs

Falling Water Dreams

Marketing Specialist - Remote Job at Falling Water Dreams

 ...professional community committed to making an impact.Key ResponsibilitiesWork independently in a remote setting with self-discipline and...  ...and trainingFlexibility to work from anywhere using a laptop and phoneSupportive team environmentIndependent contractor model... 

Structural Group Inc.

Phoenix Construction Leadman - Concrete & Structural Repair Job at Structural Group Inc.

 ...is looking for a Leadman in Phoenix, AZ. This role involves leading construction crews, ensuring quality work on projects like concrete repair and masonry restoration. The ideal candidate will have 6-10 years of experience in civil construction, strong computer skills,... 

CompHealth

Physician (MD/DO) - Hospitalist in Fort Atkinson, WI Job at CompHealth

 ...provider per shift ~ Open ICU with support and no procedures required ~ Competitive base salary from $300k, incentives, and a full hospital benefits package ~ Open to IM and FM physicians including 2027 residents ~ Southern Wisconsin community is 30 minutes from... 

RA Sushi - Mesa

Sushi Chef Job at RA Sushi - Mesa

 ...At RA Sushi, your hard work is more than just a job, it's a career opportunity. It's a building block to a successful future in the world...  ...with us and share in our success.Position Summary:The Sushi Chef is responsible for preparing sauces and sushi items for our... 

SMART TECH SKILLS LLC

RPA and Intelligent Automation Consultant Job at SMART TECH SKILLS LLC

 ...scaling to other business units. Serving as a trusted technical advisor, the consultant will design complex robotic process automations (RPA), manage platform infrastructure, and advise leadership on platform best practices and Control Room administration.Key...