Cyber Security Engineer/Splunk, Senior

Abile Group, Inc.•Chantilly, VA

About The Position

Abile Group has an exciting and challenging opportunity for a Cyber Security Engineer, Senior on a long term contract providing Cyber Security services supporting an Intelligence Community customer. All the personnel on the team will work together to provide security services and capabilities necessary to ensure IT services provided to the IC customer workforce are secure. This includes Identity and Access Control Infrastructure Operations, Cross Domain Infrastructure Operations, Cyber Security Infrastructure Operations, Cyber Security Operations, Information Technology (IT) Audit Infrastructure, and Security Infrastructure Operations. The right candidate will possess the below skills and qualifications and be ready to handle all responsibilities independently and professionally.

Requirements

Must possess an active TS/SCI w/ a CI polygraph
Bachelor’s degree, or 5+ additional years of cybersecurity experience in lieu of a degree.
5+ years of experience in an enterprise and/or cybersecurity-focused environment
DoD 8570 IAT Level II certification
Experience with Splunk administration and engineering
Experience with Splunk Enterprise Security (ES) operations and configurations
Proficiency with Unix and Windows environments

Nice To Haves

Splunk certifications such as Architect, Consultant I/II, Admin, or Power User
Experience with scripting or programming languages (e.g., Bash, Python, Java, Perl, .NET)
Familiarity with developing and deploying operational and security use cases within Splunk

Responsibilities

Manages the day-to-day operation of large enterprise Splunk deployments.
Troubleshoots data collection issues and resolving system conditions affectingstability or integrity.
Deploys and maintains both supported and unsupported Splunk add-ons.
Executes Splunk Enterprise upgrades and patches.
Configures and deploys Splunk forwarders using centralized management tools.
Maintains and tunes Splunk Enterprise Security (ES) content and performance.
Manages knowledge objects, data models, dashboards, alerts, and operationalcontent.
Supports API integrations and external system connectivity.
Develops and maintains detailed engineering and compliance documentation.
Contributes to Splunk deployment and architecture diagrams and systemdocumentation.
Enforces role-based access controls and operational security policies.
Collaborates with cyber analysts and engineering teams to improve detection andresponse capabilities.
Applys relevant security policies, standards, and technical guidelines to ensurecompliance.