Senior Principal Cyber Security Engineer
About The Position
Unlock the secrets of intelligence with MANTECH! Join a dynamic team at the forefront of national security, providing advanced solutions to government intelligence agencies. Since 1968, we've been solving the toughest challenges with groundbreaking tech. Explore thrilling projects in Digital Transformation, Cybersecurity, IT, Data Analytics and Software Development. Elevate your career and make a difference. Your adventure begins now-unleash your potential with MANTECH! MANTECH seeks a motivated, career and customer-oriented Senior Principal Cyber Security Engineer to join our team in the Chantilly, VA.
Requirements
- Bachelor's degree or 4+ additional years of cyber experience in lieu of degree
- 7+ years of experience in an IT and/or Cyber role
- Experience with Security Information and Event Management (SIEM) platforms, and/or Splunk
- Knowledge of Linux systems administration, general operating system security practices, TCP/IP networking, and network security concepts
- Knowledge of Certification & Accreditation processes
- Knowledge of DoD policy and technical security guidance to information systems
- DoD Directive 8570.1 IAT Level II or higher certification or ability to obtain within 6 months.
- Splunk Certification is required
- Must have a current/active TS/SCI w/ CI Polygraph
Nice To Haves
- Experience with Linux, Red Hat and CentOS
- Experience with AWS or other cloud environments
- Knowledge of ICS 500-27 for Audit collection requirements
- Knowledge of Enterprise Security Services, Host Base Security Service, Enterprise Vulnerability Scanning Service, and UAM
- Ability to modify feed creation to ingest customer logs in a standard format to meet policy requirements.
Responsibilities
- Troubleshoot new and current data collection issues
- Troubleshoot system issues that make the system unstable or unusable.
- Deploy and manage all supported and unsupported Splunk Add-ons that are required for specific data sources
- Provide documentation such as body of evidence documents (as needed), engineering documents, change management documents, system security plans, and accreditation documents
- Deliver a comprehensive Splunk deployment document to detail the specifications, deployment methods, and other architectural considerations to the production environment.
- Maintain a strict role-based access control solution around the data collected, to provide a need-to-know ability
- Forward Configurations and Deployments: Design and deploy forwarders rapidly with centralized configuration management (Splunk Deployment Server).
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Industry
Professional, Scientific, and Technical Services
Number of Employees
5,001-10,000 employees
