Cybersecurity Engineer - (Remote)

CareFirst BlueCross BlueShield; Baltimore (MD); Remote; USD 82,000 - 164,000; Full time

Benefits offered by this job

Comprehensive benefits package

Incentive programs

401k contributions

Job summary

CareFirst BlueCross BlueShield is seeking a cybersecurity professional to design, implement and operate Splunk-based security solutions within FedRAMP and HIPAA frameworks. You will manage data ingestion, dashboards, alerts, and incident response, collaborating with IT and security teams to ensure continuous monitoring and secure operations.

A Bachelor's degree in CS/IT or equivalent experience is required, with CISSP/CISM/CEH/CISA preferred.

Qualifications

• Bachelor's Degree in Computer Science, Information Technology, or related field, or 4 additional years of relevant work experience.
• CISSP and/or CISM or CEH or CISA preferred.

Responsibilities

• Manage Splunk Cloud app and add-on deployments within FedRAMP boundary constraints.
• Respond to customer tickets related to data ingestion issues, search performance, access requests, and platform health.
• Administer user roles, access controls, and index permissions per HIPAA and FedRAMP.
• Maintain documentation for configurations, deployments, and system changes per monitoring obligations.
• Perform system upgrades and patching for security and performance.
• Monitor system performance and troubleshoot Splunk issues.
• Collaborate with IT and security to integrate Splunk with other systems.
• Provide Splunk support and training to end users.
• Implement and manage data ingestion processes with data integrity.
• Develop and manage Splunk dashboards, reports, alerts, and visualizations.
• Experience with Splunk Enterprise Security (ES).

Skills

Security risk assessment

Incident investigation

Vulnerability understanding

IT policy & compliance

Analytical thinking

Effective communication

Education

Bachelor's degree in CS/IT or related field

Tools

Splunk

Cribl Stream/Edge

Universal Forwarder

Job description

Resp & Qualifications

Purpose

Develops and implements security solutions. Administers security technology systems. by architecting and engineering/developing trusted systems into secure systems. Assists in the development of implementation and deployment plans that are aligned to the organizational strategic plan objectives and security requirements. Advises management in developing cybersecurity policies, processes, and procedures.

Essential Functions

• Manage Splunk Cloud app and add-on deployments within FedRAMP boundary constraints, coordinating with Splunk support where cloud admin controls are limited:
• Respond to and resolve customer tickets related to data ingestion issues, search performance, access requests, and platform health.
• Administer user roles, access controls, and index permissions in alignment with HIPAA and FedRAMP compliance requirements.
• Maintain accurate documentation for all configurations, deployments, and system changes per continuous monitoring obligations.
• Perform regular system upgrades and patching to maintain security and performance.
• Monitor system performance and troubleshoot issues to ensure optimal functionality of Splunk.
• Collaborate with IT and security teams to integrate Splunk with other systems and applications.
• Provide technical Splunk support and training to end-users and stakeholders.
• Implement and manage data ingestion processes, ensuring data integrity and availability.
• Develop and manage Splunk dashboards, reports, alerts, and visualizations.
• Experience with Splunk Enterprise Security (ES).

Qualifications

Education: Bachelor's Degree in Computer Science, Information Technology, or related field OR in lieu of a Bachelor's degree, an additional 4 years of relevant work experience is required in addition to the required work experience.

Licenses/Certifications: CISSP (Certified Information Systems Security Professional) and/or CISM Certified Information Security Manager or Certified Ethical Hacker (CEH) or Certified Information Systems Auditor (CISA) upon hire preferred.

Experience: 3 years relevant IT security related experience or cybersecurity certification and 1 year related experience required.

Preferred Qualifications

• 3+ years of hands-on Splunk administration experience.
• Splunk Certified Cloud Administrator and/or Splunk Enterprise Certified Admin.
• Demonstrated experience with Universal Forwarder mass deployment, Heavy Forwarder configuration, and IDM-based data ingest.
• Proficiency in SPL and experience building and troubleshooting props/transforms for custom data onboarding.
• Proficiency with building custom dashboards to customer requested specifications.
• Working knowledge of FedRAMP and HIPAA compliance requirements within a cloud-hosted environment.
• Experience managing tickets with clear written communication and timely resolution.
• Experience with Cribl Stream or Edge for pipeline management and license optimization.

Knowledge, Skills and Abilities (KSAs)

• Ability to perform risk assessments and investigate cyber security incidents.
• Ability to understand vulnerabilities at a technical level.
• Knowledge of Information Technology (IT) policy and compliance methodology.
• Proficient in hacking techniques.
• Strong critical thinking ability and investigative/problem solving skills.
• Must be able to meet established deadlines and handle multiple customer service demands from internal and external customers, within set expectations for service excellence. Must be able to effectively communicate and provide positive customer service to every internal and external customer, including customers who may be demanding or otherwise challenging.

Salary Range

$82,440 - $163,735

Salary Range Disclaimer

The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the work is being performed. This compensation range is specific and considers factors such as (but not limited to) the scope and responsibilities of the position, the candidate's work experience, education/training, internal peer equity, and market and business consideration. It is not typical for an individual to be hired at the top of the range, as compensation decisions depend on each case's facts and circumstances, including but not limited to experience, internal equity, and location. In addition to your compensation, CareFirst offers a comprehensive benefits package, various incentive programs/plans, and 401k contribution programs/plans (all benefits/incentives are subject to eligibility requirements).

Department

Cybersecurity Operations

Equal Employment Opportunity

CareFirst BlueCross BlueShield is an Equal Opportunity (EEO) employer. It is the policy of the Company to provide equal employment opportunities to all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veteran or disabled status, or genetic information.

Federal Disc/Physical Demand

Note: The incumbent is required to immediately disclose any debarment, exclusion, or other event that makes him/her ineligible to perform work directly or indirectly on Federal health care programs.

PHYSICAL DEMANDS

The associate is primarily seated while performing the duties of the position. Occasional walking or standing is required. The hands are regularly used to write, type, key and handle or feel small controls and objects. The associate must frequently talk and hear. Weights up to 25 pounds are occasionally lifted.

Sponsorship in US

Must be eligible to work in the U.S. without Sponsorship