Cybersecurity Analyst Intermediate w/Splunk

General Dynamics Information Technology•USA NE Home Office (NEHOME), NE

3d•$127,500 - $172,500•Remote

About The Position

As a Cybersecurity Analyst with a Splunk focus, you will provide cybersecurity and vulnerability management support for a suite of DOE business applications. You will support DOE’s Corporate Business Systems, used by more than 14,000 users, as part of a 60+ person full-service application delivery team supporting DOE on multiple task orders under a Blanket Purchase Agreement. The role involves gathering technical information about organizational mission goals, IT infrastructure, and existing security products; helping develop and apply security policies and standards; and working with customers to assess and secure applications and databases. You will use Splunk and other security tools to analyze data, identify patterns, produce metrics and intelligence, support SIEM services, and develop dashboards, visualizations, reports, data models, and complex searches. You will also establish logging standards, document Splunk configuration and operating procedures, conduct vulnerability scans, collaborate with system owners to remediate vulnerabilities, diagnose problems, and recommend solutions. The position is remote, with 40 scheduled weekly hours and no travel required. U.S. citizenship is required. The successful candidate must be able to obtain and maintain a DOE clearance and pass a government background screening process. The likely salary range is $127,500–$172,500; actual compensation may vary based on experience, location, and contractual requirements.

Requirements

Bachelor’s degree in Computer Science, Information Systems, Engineering, Business, or a related discipline, with 5+ years of increasingly responsible relevant experience defining security requirements; alternatively, 6–8 years of relevant experience without a degree.
3.5+ years of hands-on experience with Splunk design and administration.
Understanding of common hacking techniques, such as malware, and effective countermeasures.
Experience with Oracle and Microsoft SQL Server databases and their security configurations.
Ability to work as a team player, manage multiple assignments, and adapt to changing client needs.
Ability to obtain and maintain a DOE clearance and successfully pass a thorough government background screening, including detailed forms and fingerprinting.
U.S. citizenship.

Nice To Haves

Experience with Trustwave DBProtect and Burp Suite.
Certified Splunk Enterprise Administrator.
Demonstrated experience with IT best practices for application, enterprise system, and network security.
Experience with antivirus, intrusion detection/protection systems, firewalls, Active Directory, vulnerability assessment tools, and other security tools used in large network environments.
Previous Department of Energy experience.

Responsibilities

Gather and organize technical information about organizational mission goals and needs, IT infrastructure, and existing security and information-assurance products.
Assist in developing and applying security and information-assurance policies, procedures, and standards.
Work with customers to minimize risk and assess and secure applications and databases.
Use cybersecurity, information assurance, network security, and related cloud-platform knowledge to support services.
Identify data patterns, provide metrics, diagnose problems, and provide business-operations intelligence using tools such as Splunk, DBProtect, and Burp Suite.
Use SIEM systems and processes to deliver cybersecurity services.
Develop Splunk dashboards and visualizations to highlight application and database alert conditions.
Establish application and database logging standards in support of government mandates.
Design and customize complex search queries and promote advanced searching, forensics, and analytics.
Develop and document configuration standards, policies, and procedures for operating, managing, and securing Splunk infrastructure.
Develop dashboards, data models, visualizations, reports, and performance optimizations.
Develop documentation for new or existing systems.
Execute and interpret vulnerability scans and collaborate with system owners to address vulnerabilities.
Apply diagnostic techniques to identify problems, investigate causes, and recommend solutions.

Benefits

401(k) with company match.
Customizable health benefits, including medical plan options and some plans with Health Savings Accounts.
Dental plan options.
Vision plan.
Full-flex work weeks where possible.
Paid time off, including vacation, sick and personal time, holidays, and paid parental, military, bereavement, and jury duty leave.
Typically 15 days of paid leave per calendar year for new employees, prorated based on hire date.
An additional 10 paid holidays per year, prorated based on hire date.
Paid Family Leave of up to 160 hours in a rolling 12-month period for eligible employees.
Short- and long-term disability benefits.
Life, accidental death and dismemberment, personal accident, critical illness, and business travel and accident insurance, provided or available.
Rewards program for high-performing employees.
Internal mobility team and collaborative teams.