Overview

Overview:

At Criterion Systems, Inc., we developed a different kind of business—a company whose real value is a reputation for excellence built upon the collective skills, talents, perspectives, and backgrounds of its people. By accepting a position with Criterion Systems, you will join a group of professionals with a collaborative mindset where we share ideas and foster professional development to accomplish our goals. In addition to our great culture, we also offer competitive compensation and benefit packages, company-sponsored team building events, and advancement opportunities.

Criterion Systems is seeking an Enterprise Detection Engineering Manager to support a government customer in Las Vegas, Nevada.

The Enterprise Detection Engineering Manager will lead and manage the Enterprise Detection Engineering team supporting a 24x7x365 operational environment. In addition to understanding the current and future threat landscape to ensure the enterprise can properly detect and respond. The candidate will also support enterprise cybersecurity operations and call center teams by understanding, developing, and optimizing the workflow of the enterprise teams to align with the customer strategic vision. Furthermore, the applicant will manage a team of various engineers responsible for the detection engineering, data ingestion, and monitoring for the enterprise. Applicant must be a positive, flexible, self-starter requiring minimal supervision, and able to excel in a fast-paced environment. Communication skills are critical with the ability to verbalize and provide documentation to both technical and non-technical audiences. Applicants must be detail-oriented, have the ability to multi-task effectively, and critical thinking skills. The candidate must also possess the ability to challenge the status quo and innovate with new solutions and capabilities.

Responsibilities

• Architect current and future SIEM technologies to align with federal government data strategy.
• Lead the development, roadmap and maintenance of various detection engineering tools and projects.
• Ensure future success of the architecture, engineering, maintenance and support for all cybersecurity sensors and tooling.
• Support and optimize the technical vision of the customer through secure and appropriate solutions for the enterprise SOC.
• Follow up on technical issues with operations and call center teams and all stakeholders in resolution process.
• Work with various external sites and stakeholders to ensure operational efficiency and uptime of enterprise services.
• Maintain and spread industry best practices, standards, and procedures.
• Partner with other engineering teams to ensure a cohesive environment of support and quick response.
• Support maintenance and monitoring of the system/server infrastructure to include patching, system upgrade, backup, and configuration.
• Conduct problem management process (root cause analysis) attempt to determine the real or underlying cause of an incident in order to prevent future recurrences.
• Learn and implement new technologies to assist driving the enterprise capabilities.
• Perform certification and professional development training to remain current on technologies and to improve skill sets and efficiency.
• Architect and design system and detection architecture in alignment with the customer and government standards.
• Analyze current enterprise processes and improve them with current and future technologies for streamlined performance.
• Manage and maintain numerous projects with the Enterprise Detection Engineering team to ensure on-time completion and compliance.
• Serve as the technical and architectural SME for the current and future technologies of the enterprise.
• Work with the Cybersecurity Architect's to ensure the enterprise roadmap aligns with optimized tool workflow and customer vision.
• Work with the Network Engineering Manager to ensure optimized workflows and develop automated processes for the enterprise network operations center in alignment with customer vision.
• Understand how to implement threat frameworks, such as MITRE ATT&CK, into current enterprise operations for support of the Enterprise SOC.
• Support and implement the strategic technical vision for the customer organization and stakeholders.

Qualifications

• Bachelor’s Degree in Computer Science, Information Technology or related engineering discipline. Four years of work experience in computer and information technology related field can be used in lieu of degree.
• 7 years of experience in Cybersecurity, IT, Systems Administration, or related field.
• DOE Q or TS Clearance or ability to attain one.
• U.S. Citizenship is required (no dual citizenship permitted).
• A combination of standard Information Assurance industry certifications, to include GSEC, CISSP, CISM, CCIE, MCSE, RHCA, DoD 8570 or the ability to obtain a certification.
• This position may require shift work based on operational requirements.
• Some limited travel required < 10%.
• Strong problem solving and root cause analysis skills.
• Customer service focus, and strong interface/communication skills.
• Ability to ask relevant questions of customers and engineers in support of problem resolution.
• Ability to work independently with little supervision.
• Ability to follow procedures and work instructions to perform tasks.
• Proficient at identifing process gaps and proactively improve system inefficiencies.
• Excellent written and verbal communication skills.
• Ability to be available during non-working hours for on-call activities or emergencies.
• Strong project management skillset and ability to manage numerous workloads.
• Able to troubleshoot complex problems and devise appropriate solutions.
• In-depth knowledge of Windows, Linux, and Virtualization platforms/technologies.

Desired Skills:

• Experience with modern ETL processes, data pipelines, data ingestion systems, data normalization, data warehousing.
• Experience and/or familiarity with software and system lifecycle methodologies, (e.g ISO, CMMI, ITIL, Agile).
• Experience working in a hybrid environment.
• Extensive experience with Windows/Linux servers/appliances in production (physical and virtualized) environment.
• Knowledge of STIG, ST&E, vulnerability management, CCRI.
• Strong understanding of current federal standards in relation to risk management, detection capability, data strategy, and compliance for Federal IT Systems.
• Experience with modern cloud solutions and offerings such as AWS,Azure, or GCP.

Security Clearance Level

•  Ability to obtain a clearance or Active Top Secret Clearance, SSBI (Single Scope Background Investigation) with the ability to upgrade to a Department of Energy (DOE) “Q” Clearance or an active DOE "Q" clearance

Work Schedule

• Full-time with work on-site each week in Las Vegas, Nevada. This is not a fully remote position.

Benefits Offered

• Medical, Dental, Vision, Life Insurance, Short-Term Disability, Long-Term Disability, 401(k) match, Tuition/Training Assistance, Parental Leave, Paid Time Off, and Holidays.

Criterion Systems, LLC and its subsidiaries are committed to equal employment opportunity and non-discrimination at all levels of our organization. We believe in treating all applicants and employees fairly and make employment decisions without regard to any individual’s protected status: race, ethnicity, color, national origin, ancestry, religion, creed, sex/gender, gender identity/gender expression, sexual orientation, physical and mental disability, marital/parental status, pregnancy (including childbirth, lactation, and related medical conditions), age, genetic information (including characteristics and testing), military and veteran status, or any other characteristic protected by law. For our complete EEO/AA and Pay Transparency statement, please visit https://careers-criterion-sys.icims.com/.