Cybersecurity Engineer IV w/Secret Clearance

TekSynap•Columbus, OH

2d•$135,000 - $175,000•Onsite

About The Position

We are seeking a Cybersecurity Engineer IV to perform a variety of routine project tasks applied to specialized cybersecurity problems. This role involves the integration of electronic processes or methodologies to resolve total system problems, or technology problems as they relate to cybersecurity requirements. The engineer will analyze information security requirements and apply analytical and systematic approaches in the resolution of problems of workflow, organization, and planning. Additionally, they will provide security engineering support for planning, design, development, testing, demonstration, and integration of information systems. The position requires analyzing threat information gathered from various sources, creating customized dashboards in Splunk ES to highlight high threat items, and administering Splunk ES and its backend database infrastructure for upgrades and daily maintenance. The engineer will also provide analysis and recommendations aligned with the roles of CERT Incident Handlers and site Information Assurance Managers, and develop ES rules, reports, dashboards, data monitors, active channels, trends, and use cases to identify threats and optimize data mining across DLA. This includes researching, planning, installing, configuring, troubleshooting, maintaining, and backing up all components in the DLA Splunk Enterprise Log Management (ELM) architecture. This position supports an upcoming government contract proposal and is contingent upon contract award and government approval.

Requirements

Minimum of seven (7) years of relevant IT experience.
Experience creating custom dashboards and reports in Splunk using threat data.
Experience in the integration and sustainment of Splunk Core and Splunk Enterprise Security (ES).
Demonstrated experience supporting government agencies, customers, or contracts within federal environments. This includes the Intelligence Community (IC), Department of Defense (DoD), Federal Civil agencies, and military organizations.
Prior experience supporting the same or similar contract, with an in-depth understanding of the customer environment, requirements, and operational landscape, is highly desirable.
8140 Requirements: DoD Cyber Workforce Framework (DCWF) Work Role 521: Cyber Defense Infrastructure Support Specialist — Intermediate. Candidates must satisfy this requirement through one of the following pathways: BA/BS in Information Technology, Cybersecurity, Computer Science, Information Systems, Data Science, or Software Engineering OR Approved DCWF 521 certifications (at least one of these certifications): Certified Ethical Hacker (CEH), CompTIA Cloud+, CompTIA Cybersecurity Analyst (CySA+), CompTIA PenTest+, CompTIA Security+, GIAC Continuous Monitoring Certification (GMON), GIAC Response and Industrial Defense (GRID), GIAC Security Essentials Certification (GSEC), Systems Security Certified Practitioner (SSCP) OR Approved DCWF Work role 521 Military Training.
DoD Cyber Workforce Framework (DCWF) Work Role 451: System Administrator - Intermediate. Candidates must satisfy this requirement through one of the following pathways: BA/BS in Information Technology, Cybersecurity, Computer Science, Information Systems, Data Science, or Software Engineering OR Approved DCWF 451 certifications: CompTIA Cloud+, CompTIA Security+, GIAC Global Industrial Cyber Security Professional (GICSP), GIAC Security Essentials Certification (GSEC), Systems Security Certified Practitioner (SSCP) OR Approved DCWF Work Role 451 Military Training.
Computing Environment Certification: Linux+, Splunk Administrator.
Secret – IT-I/T5 Clearance.
U.S. Citizen

Nice To Haves

Prior experience supporting the same or similar contract, with an in-depth understanding of the customer environment, requirements, and operational landscape, is highly desirable.

Responsibilities

Performs a variety of routine project tasks applied to specialized cybersecurity problems.
Tasks involve integration of electronic processes or methodologies to resolve total system problems, or technology problems as they relate to cybersecurity requirements.
Analyzes information security requirements.
Applies analytical and systematic approaches in the resolution of problems of workflow, organization, and planning.
Provides security engineering support for planning, design, development, testing, demonstration, integration of information systems.
Analyzes threat information gathered from logs, Intrusion Detection Systems (IDS), intelligence reports, vendor sites, and a variety of other sources.
Creates customized dashboards using Security Information and Event Management (SIEM) tool Splunk ES to elevate high threat items to incident responders.
Administration knowledge of the Splunk ES and backend database infrastructure related to upgrades and daily maintenance is essential.
Provide analysis and make recommendations in line with the roles of CERT Incident Handlers (IH) and site Information Assurance Managers (IAM).
Develop ES rules, reports, dashboards, data monitors, active channels, trends and use cases to identify threats and optimize data mining across DLA. Will research, plan, install, configure, troubleshoot, maintain and backup all components in the DLA Splunk Enterprise Log Management (ELM) architecture.