Senior Splunk SIEM Engineer - Onsite (TS)

RYAN Consulting Group; Richmond (VA); Sur place; USD 126 000 - 154 000; Plein temps

Avantages offerts par ce poste

Paid Holidays

Health Insurance

401(k) or Roth plan with employer匹配

Medical, Dental, Vision Coverage

Health Savings Account

Résumé du poste

Ryan Consulting Group, Inc. is seeking a Cybersecurity Engineer 4 – Splunk SIEM to support the Defense Logistics Agency.

The role focuses on maintaining Splunk Core and Splunk Enterprise Security, developing dashboards and correlation searches, and supporting enterprise security monitoring and incident response. The position requires active Top Secret clearance, onsite work in Columbus, OH or Richmond, VA, and travel.

Qualifications

• Seven+ years IT cybersecurity experience, preferably with federal government.
• Hands-on experience administering and sustaining Splunk Core/ES environments.
• Experience creating customized Splunk dashboards and reports.

Responsabilités

• Administer Splunk Core and ES infrastructure.
• Develop and customize Splunk ES correlation searches, security rules, dashboards, reports and data monitors.
• Analyze security logs, IDS data, threat intel and vendor information.
• Maintain Splunk ES backend infrastructure, upgrades, and daily maintenance.
• Plan and support DLA Splunk Enterprise Log Management architecture.
• Develop security monitoring use cases and trend analyses.
• Provide security analysis to CERT and IAM teams.
• Support cybersecurity engineering activities across system development lifecycle.
• Apply analytical approaches to cybersecurity challenges.

Connaissances

Splunk

Cybersecurity

Incident response

Formation

DCWF 521 – Cyber Defense Infrastructure Support Specialist

DCWF 451 – System Administrator

Bachelor's degree in IT, Cybersecurity, CS, IS, Data Science, or Software Eng

Outils

Splunk Core

Splunk Enterprise Security

Dashboards & correlation searches

Description du poste

Ryan Consulting Group, Inc. is seeking a Cybersecurity Engineer 4 – Splunk SIEM to support the Defense Logistics Agency.

The role focuses on maintaining Splunk Core and Splunk Enterprise Security, developing dashboards and correlation searches, and supporting enterprise security monitoring and incident response. The position requires active Top Secret clearance, onsite work in Columbus, OH or Richmond, VA, and travel.