Cybersecurity Engineer (Splunk)

Horizon Industries • Columbus, OH

1d • Onsite

About The Position

Horizon Industries Limited is seeking a full-time Cybersecurity Engineer to support the Defense Logistics Agency (DLA) through the JETS Program. The position is onsite in Columbus, Ohio, or Richmond, Virginia. The JETS Program delivers IT services and technical and management support across the DLA IT Enterprise, including support for information technology solutions, operations, application development and maintenance, and lifecycle management.

The Cybersecurity Engineer performs information assurance and security engineering work, including routine project tasks addressing specialized information assurance problems; integrating electronic processes or methodologies to resolve system and technology problems related to IA requirements; and conducting security assessments and consulting. The role analyzes information security requirements and threat information from logs, intrusion detection systems, intelligence reports, vendor sites, and other sources. It also supports the planning, design, development, testing, demonstration, and integration of information systems.

The role requires an active Top Secret clearance, seven years of relevant IT experience, specified DoD 8140 certifications at the required proficiency levels for DCWF Work Roles 521 and 451, and Linux+ and Splunk Administrator qualifications. Splunk responsibilities include creating custom dashboards and reports using threat data and integrating and sustaining Splunk Core and Splunk Enterprise Security. Candidates with enterprise Splunk deployment experience may be eligible for alternate work locations within commuting proximity to DLA locations.

Requirements

• Seven years of relevant IT experience.
• Active Top Secret clearance.
• DoD 8140 Primary DCWF Work Role 521 certification at Intermediate proficiency level (Advanced certifications are also accepted); listed certifications include GMON, GRID, CEH, CISSP-ISSAP, CISSP-ISSEP, Cloud+, CySA+, GCIA, GICSP, GSEC, PenTest+, Security+, and SSCP.
• Secondary DCWF Work Role 451 certification at Intermediate proficiency level (Advanced certifications are also accepted); listed certifications include SecurityX/CASP+, CCNP Security, CCSP, Cloud+, FITSP-O, GFACT, GICSP, GSEC, Security+, and SSCP.
• Linux+ qualification and experience.
• Splunk Administrator qualification and experience.
• Experience creating custom dashboards and reports in Splunk using threat data.
• Experience integrating and sustaining Splunk Core and Splunk Enterprise Security (ES).

Nice To Haves

• CERT or SOC experience, including knowledge of or hands-on experience with incident response and incident handling processes.
• Experience with SIEM tools for monitoring, analysis, and threat detection.
• Familiarity with SOAR automation capabilities and the ability to identify opportunities for process automation.
• Understanding of user behavior analysis and User Activity Monitoring (UAM) solutions.
• Working knowledge of Linux environments.
• Experience using Cribl for data routing, observability pipelines, or log management.
• Department of Defense information assurance (DoD IA) experience.
• Enterprise Splunk deployment experience; may qualify candidates for alternate work locations within commuting proximity to DLA locations.

Responsibilities

• Perform routine project tasks addressing specialized information assurance problems.
• Integrate electronic processes or methodologies to resolve total-system problems and technology problems related to information assurance requirements.
• Conduct security assessments and provide security consulting services.
• Analyze information security requirements.
• Apply analytical and systematic approaches to resolve workflow, organization, and planning problems.
• Provide security engineering support for the planning, design, development, testing, demonstration, and integration of information systems.
• Analyze threat information gathered from logs, Intrusion Detection Systems (IDS), intelligence reports, vendor sites, and other sources.
• Create custom Splunk dashboards and reports using threat data.
• Integrate and sustain Splunk Core and Splunk Enterprise Security (ES).

Benefits

• Healthcare coverage, including medical, dental, vision, and disability.
• 401(k) program with 100% vesting from day one and an employer match after 90 days.
• Educational Assistance program.
• Student Loan Repayment Program.
• Gym Reimbursement Program.
• Paid time off.
• A dynamic, passionate, multidisciplinary team.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed