Cybersecurity Engineer
About The Position
Connected Logistics is seeking Cybersecurity Engineers to assist in providing Cybersecurity Technology Support to the Cybersecurity Technology group within DLA to assist in integration, operational support and sustainment of Cybersecurity Technologies. In these roles you will perform a variety of routine project tasks applied to specialized information assurance problems; other duties include but are not limited to: Handling the integration of electronic processes or methodologies to resolve total system problems, or technology problems as they relate to IA requirements. Analyzing information security requirements. Applying analytical and systematic approaches in the resolution of problems of workflow, organization, and planning. Providing security engineering support for planning, design, development, testing, demonstration, integration of information systems.
Requirements
- US Citizenship Required
- KP-1 F5 Certified
- Seven (7) years relevant experience
- Ability to travel
- Clearance: Top Secret
- Investigative Requirement: IT I, Tier 5/SSBI
- 8570/8140: DoD Approved 8570 Baseline Certification: Category IAT Level III (CISSP, CISM or Equivalent)
- 8570/8140: DoD Approved 8570 Baseline Certification: CND-IS (CEH, CYSA+, GICSP, SSCP)
- Computing Environment Certifications: F5 Certified Technology Specialist is ASM
- KP-2 RSA Archer or Windows Server 16/19 Certified
- Seven (7) years relevant experience
- Ability to travel
- Clearance: Secret
- Investigative Requirement: IT I, Tier 5/SSBI
- 8570/8140: DoD Approved 8570 Baseline Certification: Category IAT Level III (CISSP, CISM or Equivalent)
- 8570/8140: DoD Approved 8570 Baseline Certification: CND-IS (CEH, CYSA+, GICSP, SSCP)
- Computing Environment Certifications: Certified in Microsoft Windows Server 2016 or 2019 OR RSA Archer Certified Administrator
- KP-3 Trellix IPS Manager or Check Point IPS Blade
- Seven (7) years relevant experience
- Four (4) years of experience creating customized signatures using SNORT.
- Ability to travel
- Clearance: Top Secret
- Investigative Requirement: IT I, Tier 5/SSBI
- 8570/8140: DoD Approved 8570 Baseline Certification: Category IAT Level III (CISSP, CISM or Equivalent)
- 8570/8140: DoD Approved 8570 Baseline Certification: CND-IS (CEH, CYSA+, GICSP, SSCP)
- Computing Environment Certifications: Trellix IPS manager OR Check Point IPS Blade
- KP-4 Splunk Administrator
- Seven (7) years relevant experience
- Ability to travel
- Clearance: Top Secret
- Investigative Requirement: IT I, Tier 5/SSBI
- 8570/8140: DoD Approved 8570 Baseline Certification: Category IAT Level III (CISSP, CISM or Equivalent)
- 8570/8140: DoD Approved 8570 Baseline Certification: CND-IS (CEH, CYSA+, GICSP, SSCP)
- Computing Environment Certifications: Linux+ OR Splunk Administrator
Responsibilities
- Handling the integration of electronic processes or methodologies to resolve total system problems, or technology problems as they relate to IA requirements.
- Analyzing information security requirements.
- Applying analytical and systematic approaches in the resolution of problems of workflow, organization, and planning.
- Providing security engineering support for planning, design, development, testing, demonstration, integration of information systems.
- Analyzes threat information gathered from logs, Intrusion Detection Systems (IDS), intelligence reports, vendor sites, and a variety of other sources.
- Creates customized dashboards using Security Information and Event Management (SIEM) tool Splunk ES to elevate high threat items to incident responders.
- Administration knowledge of the Splunk ES and backend database infrastructure related to upgrades and daily maintenance is essential.
- Provide analysis and make recommendations in line with the roles of CERT Incident Handlers (IH) and site Information Assurance Managers (IAM).
- Develop ES rules, reports, dashboards, data monitors, active channels, trends and use cases to identify threats and optimize data mining across DLA.
- Will research, plan, install, configure, troubleshoot, maintain and backup all components in the DLA Splunk Enterprise Log Management (ELM) architecture.
- Must have experience creating custom dashboards and reports in Splunk using threat data.
- Must have experience in the integration and sustainment of Splunk Core and Splunk Enterprise Security (ES).
Benefits
- health, dental, vision, life, and disability insurance
- a great 401(k) package
- generous Paid Time Off
- ongoing professional development
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
