Cyber Defense Engineer: Splunk SIEM & Threat Analytics

Confidential; Columbus (OH); On-site; USD 90,000 - 150,000; Full time

Job summary

Confidential, a defense IT contractor, seeks a senior cybersecurity professional to perform advanced tasks on SIEM and threat analytics. You will analyze security requirements, design and maintain Splunk ES deployments, and develop dashboards and data monitors to elevate threats to incident responders in line with CERT IH and IAM roles.

Positions are in Columbus, OH and Richmond, VA; require seven years of IT experience, DOD Secret clearance, and proficiency with Linux and Splunk Core/ES.

Qualifications

• Seven (7) years of IT experience.
• DOD Secret Clearance and IT-1 Critical Sensitive or Tier 5 at proposal submission.
• Experience creating custom dashboards and reports in Splunk using threat data.
• Experience in integration and sustainment of Splunk Core and Splunk Enterprise Security (ES).

Responsibilities

• Develop ES rules, reports, dashboards, data monitors, active channels, trends and use cases to identify threats.
• Plan, install, configure, troubleshoot, maintain and backup Splunk components in DLA ELM architecture.
• Provide security engineering support for planning, design, development, testing and integration of information systems.

Skills

Threat analysis

Splunk ES

Splunk

Incident response

Dashboards

Tools

Splunk Core

Splunk ES

Linux

Job description

Confidential, a defense IT contractor, seeks a senior cybersecurity professional to perform advanced tasks on SIEM and threat analytics. You will analyze security requirements, design and maintain Splunk ES deployments, and develop dashboards and data monitors to elevate threats to incident responders in line with CERT IH and IAM roles.

Positions are in Columbus, OH and Richmond, VA; require seven years of IT experience, DOD Secret clearance, and proficiency with Linux and Splunk Core/ES.