Microsoft Sentinel

Microsoft Sentinel Data Jobs

2 jobs found

Today

Cybersecurity Analytics Systems Administrator

Peraton MacDill AFB, FL

MacDill AFB, FL

Today

$66k - $106k/yr Full time Analytics Cybersecurity Tools Data Platform

Apply Now

Job Description

Peraton is seeking a Cybersecurity Analytics Systems Administrator to support daily operations and ongoing health monitoring for enterprise security data and analytics platforms for SITEC 3 EOM. This onsite role at Macdill AFB, FL focuses on keeping centralized SIEM environments available, secure, and reliable through administration, ingestion oversight, upgrades, and troubleshooting.

The position is responsible for managing user access and platform configurations across Splunk and Microsoft Sentinel, administering the underlying Red Hat Enterprise Linux (RHEL) systems, and ensuring data collection agents and ingestion pipelines operate correctly. You will also support analysts by addressing routine issues in dashboards and queries while tracking operational performance and data integrity.

Key Responsibilities

Administer user access with RBAC, index permissions, and routine configurations across Splunk Enterprise, Splunk ES, and Microsoft Sentinel workspaces.
Maintain and administer underlying RHEL servers, including OS-level user management, disk space allocation, system auditing, package updates, and STIG hardening.
Deploy, configure, and maintain data collection agents such as Splunk Universal/Heavy Forwarders, Sentinel Azure Monitor, and syslog daemons to support dependable data flow.
Monitor platform operational health, including indexer status, search head performance, and disk utilization across hot/warm/cold storage tiering to prevent data loss or disruption.
Run scheduled upgrades and minor updates, including Splunk technology add-on (TA) updates and SSL/TLS certificate renewals across deployment tiers.
Troubleshoot ingestion failures and related issues such as broken forwarder feeds, missing sourcetypes, and basic search query performance problems submitted by analysts.
Perform scheduled configuration backups (for example, Splunk etc directory snapshots and Sentinel workspace templates) and verify restoration procedures.
Create alerts and notifications for unusual activity, including security breaches or system failures.
Maintain documentation of system configurations and changes, and perform basic troubleshooting to identify causes when issues occur.
Analyze data to identify patterns, trends, or other useful information.
Support users experiencing system problems or incorrect usage.
Manage dashboard permissions and schedule automated PDF report generation, ensuring dashboards load consistently without permissions-related errors.
Monitor real-time ingestion rates and sourcetype volume, alerting on sudden data drops, silence gaps, or duplicate event streams across deployed inputs.
Assist security analysts with basic dashboard troubleshooting, updating broken filters, correcting simple SPL/KQL syntax errors, and validating input dropdown tokens.

Required Qualifications

Minimum experience based on education level: 12 years with HS degree, 10 years with AS/AA, 8 years with BS/BA, or 6 years with MS/MA.
DoW TS/SCI clearance.
DoD 8570 IAT II Certification.
Must be DoD 8140 compliant under Work Role Code 451 – Systems Administrator Intermediate (Intermediate level or higher).

Technologies

Splunk Enterprise, Splunk ES, Microsoft Sentinel
Red Hat Enterprise Linux (RHEL)
Splunk Universal/Heavy Forwarders, Sentinel Azure Monitor, syslog daemons
hot/warm/cold storage tiering, STIG, SSL/TLS
Splunk technology add-on (TA), SPL, KQL

Compensation and Benefits

Target salary range: USD 66,000 - 106,000 per year.
Medical, dental, vision, life, health savings account
Short/long term disability, EAP, parental leave
401(k), paid time off (PTO) for vacation, and company paid holidays

Application window: estimated 30 days from the job posting date. During the review process, applicants may be required to participate in an on-camera interview and complete an identity verification step. Use of artificial intelligence tools during Peraton interviews is strictly prohibited unless the candidate has prior written authorization, and all interview responses must be the candidate’s own. Peraton is an Equal Opportunity Employer, including disability and protected veterans.

View full job page →

1mo ago

Network and Cyber Test Data Analyst

CACI Alexandria, VA

Alexandria, VA

1mo ago Closed

$87k - $182k/yr Full time Artificial Intelligence Command And Control Cyber Threat Analysis

This position is no longer accepting applications (closed Sep 13, 2026).

Job Description

CACI is seeking a JIATF 401 Network and Cyber Test Data Analyst in Alexandria, VA to collect, correlate, analyze, and visualize network, cyber, and operational test data supporting Counter-Unmanned Aircraft Systems (C-UAS) technology evaluations. The role supports performance, interoperability, resiliency, and cybersecurity assessments through analytical products such as dashboards, reports, and executive briefings.

Responsibilities

Collect, aggregate, correlate, and analyze network, cyber, RF, and operational test data from C-UAS technologies, sensors, command and control systems, and supporting enterprise networks.
Use Maven Smart System (MSS), Palantir, Power BI, Python, and AI-enabled analytical tools to support network analysis, cybersecurity assessments, and operational test evaluations.
Analyze network traffic, packet captures, system logs, cybersecurity events, telemetry, and performance metrics to identify trends, vulnerabilities, anomalies, and operational impacts.
Support developmental testing, operational testing, technology demonstrations, and capability evaluations by producing analytical products measuring system performance, resiliency, and cybersecurity effectiveness.
Evaluate network architectures, system interoperability, communications performance, latency, bandwidth utilization, and cybersecurity controls supporting C-UAS operations.
Create dashboards, data visualizations, technical reports, and executive-level briefings that communicate network performance, cyber readiness, operational effectiveness, and mission impacts.
Apply artificial intelligence, machine learning, and automated analytics to accelerate log analysis, anomaly detection, threat identification, and operational decision support.
Analyze cybersecurity events, defensive cyber operations data, vulnerability assessment results, penetration testing outcomes, and system audit logs to identify risks and recommend mitigation strategies.
Develop performance metrics and analytical frameworks to evaluate network reliability, cyber resiliency, system availability, interoperability, and mission effectiveness.
Coordinate with Test Engineers, Network Engineers, Cybersecurity Engineers, Software Engineers, operators, acquisition personnel, and mission stakeholders to develop test assessments and technical recommendations.
Assist with test planning by identifying data collection requirements, instrumentation needs, success criteria, and analytical methodologies for network and cyber evaluations.
Produce technical documentation, analytical reports, after-action reviews, operational assessments, and executive briefings supporting acquisition decisions and capability development.
Maintain data integrity, security, and compliance with applicable cybersecurity policies, information assurance standards, and data governance requirements.
Stay current on emerging cybersecurity threats, network technologies, AI-enabled analytical capabilities, and evolving C-UAS architectures to strengthen organizational capabilities.

Requirements

Active Top Secret/SCI Clearance.
BA/BS with 4+ years; AA/AS with 8+ years; or HS/GED with 10+ years.
Demonstrated experience analyzing network performance, cybersecurity events, system logs, operational test data, or enterprise network environments.
Experience using Maven Smart System (MSS), Palantir, or similar enterprise data integration and analytics platforms.
Experience developing dashboards, reports, and interactive visualizations using Power BI or similar business intelligence platforms.
Working knowledge of Python for data analysis, automation, scripting, and analytical workflows.
Experience leveraging AI-enabled tools, machine learning applications, or advanced analytics platforms for network or cyber analysis.
Knowledge of TCP/IP networking, network protocols, cybersecurity principles, system logging, packet analysis, and network performance monitoring.
Experience analyzing packet captures, firewall logs, endpoint telemetry, SIEM data, or operational test instrumentation.
Experience collecting, organizing, validating, cleansing, and exploiting structured and unstructured technical datasets from multiple operational and enterprise sources.
Strong proficiency with Microsoft Office Suite, including technical documentation, analytical reports, executive briefings, and presentation materials.
Ability to translate complex network and cybersecurity findings into concise, actionable recommendations for senior military and civilian leadership.
Proven ability to collaborate with multidisciplinary engineering, cyber, operational, and acquisition teams in dynamic mission environments.

Technologies

Maven Smart System (MSS)
Palantir
Power BI
Python
Artificial intelligence
Machine learning
Wireshark
Splunk
Microsoft Sentinel
Elastic Stack
Security Information and Event Management (SIEM)
NIST RMF
Zero Trust Architecture
CJADC2

Desired

Experience supporting Department of Defense, Intelligence Community, Homeland Security, or Counter-Unmanned Aircraft Systems (C-UAS) organizations.
Familiarity with C-UAS command and control networks, tactical communications, mission command systems, and network-enabled sensor architectures.
Experience supporting developmental test and evaluation (DT&E), operational test and evaluation (OT&E), cybersecurity test events, or technology demonstrations.
Knowledge of cybersecurity frameworks including NIST RMF, Zero Trust Architecture, DoD cybersecurity policies, and defensive cyber operations.
Experience utilizing Wireshark, Splunk, Microsoft Sentinel, Elastic Stack, SIEM platforms, or comparable network and cyber analysis tools.
Experience supporting CJADC2, data fusion, common operating picture development, cloud-based network architectures, or operational decision-support systems.

Location and Salary

Location: Alexandria, VA (onsite)

Pay range: USD 86,600 - 181,800 per yearly

View full job page →

Microsoft Sentinel Data Jobs

Cybersecurity Analytics Systems Administrator

Network and Cyber Test Data Analyst

Get Microsoft Sentinel Data Jobs alerts