Cybersecurity Engineer (Splunk)

Horizon Industries • Columbus, OH

5d • Onsite

About The Position

Horizon Industries Limited (Horizon) is a dynamic IT and Management Consulting firm based in the Washington, DC area, and we are currently seeking a Cybersecurity Engineer for a full-time position supporting the Defense Logistics Agency (DLA) on-site in Columbus, OH, or Richmond, VA. Performs a variety of routine project tasks applied to specialized cybersecurity problems. Tasks involve integration of electronic processes or methodologies to resolve total system problems, or technology problems as they relate to cybersecurity requirements. Analyzes information security requirements. Applies analytical and systematic approaches in the resolution of problems of workflow, organization, and planning. Provides security engineering support for planning, design, development, testing, demonstration, and integration of information systems. Analyzes threat information gathered from logs, Intrusion Detection Systems (IDS), intelligence reports, vendor sites, and a variety of other sources. Creates customized dashboards using the Security Information and Event Management (SIEM) tool Splunk ES to elevate high-threat items to incident responders. Administration knowledge of the Splunk ES and backend database infrastructure related to upgrades and daily maintenance is essential. Provide analysis and make recommendations in line with the roles of CERT Incident Handlers (IH) and site Information Assurance Managers (IAM). Develop ES rules, reports, dashboards, data monitors, active channels, trends, and use cases to identify threats and optimize data mining across DLA. Will research, plan, install, configure, troubleshoot, maintain, and back up all components in the DLA Splunk Enterprise Log Management (ELM) architecture.

Requirements

• Seven (7) years of relevant IT experience
• Primary DCWF Work Role 521: Cyber Defense Infrastructure Support Proficiency Level: Intermediate (any of the following): Security+, CySA+, CEH, SSCP, GSEC, GMON, Cloud+, or PenTest+.
• Secondary DCWF Work Role 451: System Administrator Proficiency Level: Intermediate (any of the following): Security+, Cloud+, GSEC, GICSP, or SSCP.
• Computing Environment: Linux+
• Splunk Administrator
• Experience creating custom dashboards and reports in Splunk using threat data.
• Experience in the integration and sustainment of Splunk Core and Splunk Enterprise Security (ES).
• Active Top Secret clearance

Responsibilities

• Performs a variety of routine project tasks applied to specialized cybersecurity problems.
• Tasks involve integration of electronic processes or methodologies to resolve total system problems, or technology problems as they relate to cybersecurity requirements.
• Analyzes information security requirements.
• Applies analytical and systematic approaches in the resolution of problems of workflow, organization, and planning.
• Provides security engineering support for planning, design, development, testing, demonstration, and integration of information systems.
• Analyzes threat information gathered from logs, Intrusion Detection Systems (IDS), intelligence reports, vendor sites, and a variety of other sources.
• Creates customized dashboards using the Security Information and Event Management (SIEM) tool Splunk ES to elevate high-threat items to incident responders.
• Administration knowledge of the Splunk ES and backend database infrastructure related to upgrades and daily maintenance is essential.
• Provide analysis and make recommendations in line with the roles of CERT Incident Handlers (IH) and site Information Assurance Managers (IAM).
• Develop ES rules, reports, dashboards, data monitors, active channels, trends, and use cases to identify threats and optimize data mining across DLA.
• Will research, plan, install, configure, troubleshoot, maintain, and back up all components in the DLA Splunk Enterprise Log Management (ELM) architecture.

Benefits

• healthcare (medical, dental, vision and disability)
• a 401k program where you are 100% vested from day one with an employer match after 90 days.
• an Educational Assistance program.
• a Student Loan Repayment Program
• Gym Reimbursement Program.
• Paid Time off

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed