✦ Luna Orbit — Cybersecurity

Cyber Systems Administrator (Active TS-SCI clearance)

at Northrop Grumman Corporation

📍 Tampa, FL Onsite Posted April 02, 2026
Type Full-Time
Experience lead
Exp. Years 5+ years
Education Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field, or relevant industry certifications. Equivalent work experience is equally preferable.
Category Cybersecurity

Design, implement, and operate enterprise-scale SIEM architectures with a focus on Cribl Stream/Edge feeding Splunk and downstream consumers. Build data lakes/warehouses (AWS-based) and define platform standards for SIEM/SOAR across hybrid environments.

  • Design and implement enterprise-scale SIEM architectures
  • Leverage Cribl Stream/Edge for data pipelines
  • Build/manage Security Data Lakes and Warehouses (AWS-based)
  • Define SIEM/SOAR platform standards
  • Integrate diverse data sources (on-prem, cloud, SaaS, containers) into SIEM

Expertise in SIEM/SOAR technologies, data pipelines, cloud and on-prem integration, and scripting for automation; strong knowledge of security monitoring and incident reporting.

An AVP-level security engineer with 5+ years in cybersecurity, SIEM/SOAR, and data lake/warehouse experience; strong Cribl/Splunk and AWS skills; proven leadership and vendor management capabilities.

At least 5+ years of experience in technology with emphasis on cyber securityAt least 3+ years of experience in SIEM and SOAR products such as SplunkElasticDatadogCriblAt least 1+ years of experience in Data Lake and data warehouse using AWS S3SnowflakeDatabricksExperience with scripting like PythonAnsibleExperience with monitoring tools such as ELKSolarWindsVMware AriaKnowledge of routing protocols and network configurations
Experience with on-premise environmentsJira/Confluence administrationExperience with Cribl Stream/Edge
Cribl StreamCribl EdgeSplunkElasticDatadogAWS S3SnowflakeDatabricksRegexKQLPythonAnsibleHorizonDell Wyse ManagementTeradicivCenterESXiVMware AriaCisco NetworkingNetAppSynologyMECM
CybersecuritySIEMSplunkCriblCribl StreamCribl EdgeData LakeData WarehouseAWSSnowflakeDatabricksRegexKQLPythonAnsibleVMwareHorizonELKSolarWindsVMware AriaCisco NetworkingNetAppSynology
Domain AdministrationSystem AdministrationNetwork AdministrationLinuxWindowsVirtualizationvCenterESXiHorizonDell Wyse ManagementTeradiciELKSolarWindsVMware AriaCisco NetworkingNetAppSynologyVEEAMRegExSplunk SPLKusto Query Language (KQL)
CommunicationMentoringTeam leadershipProblem solvingCollaborative

Preferred

Certifications: CISSPCISMCISACEH
Industry Defense
Job Function SIEM Systems Engineer leading enterprise security monitoring and data integration for MUFG
Role Subtype Security Engineer
siemsplunkcribledgesoardata lakedata warehouseawsamazon web servicess3snowflakedatabricksregexkqlpythonansiblehybrid cloudsecurity engineerit securitycybersecurityAVPsecurity operationssecurity standards

Must be onsite 4 days and 1 day remote across Tampa/NJ/Tempe, Willingness to work in hybrid environment

Apply for this Position →

Get matched to jobs like this

Luna finds roles that fit your skills and career goals — no endless scrolling required.

Create a Free Profile