Cybersecurity Engineer – SME

Sentar Inc.; Huntsville (AL); On-site; USD 80,000 - 120,000; Full time

Job summary

An established industry player is seeking a Cybersecurity Engineer to join their dynamic team. This role involves safeguarding information assets by developing and enhancing SIEM strategies, configuring security tools, and collaborating with incident response teams. The ideal candidate will have extensive experience in cybersecurity, particularly with Splunk and EDR technologies. This position offers a chance to innovate and secure your career in a supportive and inclusive environment, with a comprehensive benefits package and opportunities for professional development. If you're passionate about cybersecurity and ready to make an impact, this is the opportunity for you.

Benefits

Voluntary Medical, Dental, Vision Insurance

401(k) Match

Competitive PTO Plan

Tuition Reimbursement

Professional Development Reimbursement

Mental Health Awareness Programs

Recognition and Awards Programs

Qualifications

• 10+ years IT experience with 5+ years in cybersecurity.
• 3+ years hands-on experience with Splunk.
• Experience developing SIEM and EDR use cases.

Responsibilities

• Enhance SIEM strategy and tool implementation using Splunk.
• Monitor security events and conduct detailed analysis.
• Collaborate with incident response teams to remediate incidents.

Skills

Cybersecurity

Splunk

Incident Response

Network Protocols

SIEM

EDR

Data Flow Diagrams

Education

Bachelor's Degree in IT or Cybersecurity

Tools

Crowdstrike EDR

Palo Alto XDR

Microsoft Sentinel

Job description

Join to apply for the Cybersecurity Engineer – SME role at Sentar Inc.

Sentar is dedicated to developing the critical talent that the connected world demands to create solutions to address the convergence of cybersecurity, intelligence, analytics, and systems engineering. We invite you to join the small business team where you can build, innovate, and secure your career.

Sentar is seeking a highly skilled and knowledgeable Cybersecurity Engineer – SME Level to support a 24x7x365 Watch Floor team and safeguard the confidentiality, integrity, and availability of an organization's information assets. This position is located on customer site in Huntsville, AL or Clarksburg, WV.

Responsibilities Include But Are Not Limited To

1. Develop, upgrade, and enhance the enterprise Security Information and Event Monitoring (SIEM) strategy and tool implementation via Splunk, design data flow diagrams and alert feed architectures to ensure seamless alert integration.
2. Develop and maintain SIEM architecture, including data sources, log management, and alerting mechanisms.
3. Configure tools, settings, alerts, and notifications to improve the enterprise security and resilience capabilities, including implementation of Security Orchestration and Automation for Response (SOAR) and Endpoint Detection and Response (EDR) capabilities.
4. Develop content for rule implementation on network border devices (firewalls, routers, switches, IDS/IPS, Taclanes, etc.).
5. Monitor security events and alerts, conducting detailed analysis to identify potential security incidents.
6. Participate in response activities to all major enterprise outages. Provide technical guidance and support to junior analysts and other team members. Stay current with the latest SIEM technologies, cyber threats, and best practices.
7. Work and collaborate with incident response teams to investigate and remediate security incidents.

Qualifications

Clearance Level: Top Secret security clearance with SCI eligibility

Education: Bachelor's degree, preferably in an IT-related or cybersecurity discipline.

Experience:

• Minimum of 10 years IT-related experience; preferably minimum of 5 years in cybersecurity.
• Minimum 3 years of hands-on experience with Splunk.
• Minimum of 2 years of hands-on experience with Crowdstrike EDR or Palo Alto XDR.
• Experience in developing and tuning SIEM and EDR use cases, correlation rules, and alerts.
• Strong understanding of network protocols, system logs, and security event correlation.
• Experience working with incident response teams for triaging and analysis.

Preferred Qualifications

• Experience using Microsoft Sentinel.
• Preferred Certifications:
• GIAC Continuous Monitoring Certification (GMON)
• GIAC Certified Incident Handler (GCIH)
• GIAC Certified Forensic Analyst (GCFA)
• GIAC Certified Intrusion Analyst (GCIA)
• GIAC Network Forensic Analyst (GNFA)
• GIAC Cloud Threat Detection (GCTD)
• GIAC Cloud Forensics Responder (GCFR)

Benefits At Sentar

In addition to a great culture, Sentar fosters an inclusive work environment and offers an extensive benefits package, including:

• Voluntary Medical, Dental, Vision, with Health Savings or Flexible Spending Plan options.
• Voluntary Life, Critical Illness, Accident, and Long Term Care insurance options.
• Group Term Life, Short-Term and Long-Term Disability for qualifying employees.
• Generous 401(k) match.
• Competitive PTO plan that increases with years of service.
• Other leave programs, holiday schedule, bereavement, jury, and military duty leave.
• Mental health awareness programs.
• Tuition reimbursement.
• Professional development reimbursement.
• Recognition and Awards programs.

If you are not ready to apply, submit your resume here to join our talent community. We'll keep you updated on new job opportunities.

Sentar is an Affirmative Action and Equal Opportunity Employer M/F/Vets/Persons with Disabilities. For accommodations during the application process, contact [e-mail].

Build, Innovate, Secure Your Career at Sentar.