Senior Principal Cyber Security Engineer

Abile Group, Inc.•Chantilly, VA

1d•Onsite

About The Position

Abile Group has an exciting and challenging opportunity for a Senior Principal Cyber Security Engineer on a long term contract providing Cyber Security services supporting an Intelligence Community customer. All the personnel on the team will work together to provide security services and capabilities necessary to ensure IT services provided to the IC customer workforce are secure. This includes Identity and Access Control Infrastructure Operations, Cross Domain Infrastructure Operations, Cyber Security Infrastructure Operations, Cyber Security Operations, Information Technology (IT) Audit Infrastructure, and Security Infrastructure Operations. The right candidate will possess the below skills and qualifications and be ready to handle all responsibilities independently and professionally.

Requirements

Must possess an active TS/SCI w/ a CI polygraph.
Bachelor’s degree, or 4+ additional years of cybersecurity experience in lieu of a degree.
10+ years of experience in a cybersecurity role.
DoD Directive 8570.1 IAT Level II or higher certification, or the ability to obtain within six (6) months.
Splunk certification is required.
Experience with Security Information and Event Management (SIEM) platforms and/or Splunk.
Knowledge of Linux systems administration, general operating system security practices, TCP/IP networking, and network security concepts.
Knowledge of Certification and Accreditation (C&A) processes.
Knowledge of DoD policy and technical security guidance for information systems.

Nice To Haves

Experience with Linux distributions, including Red Hat and CentOS.
Experience with AWS or other cloud environments.
Knowledge of ICS 500-27 audit collection requirements.
Familiarity with Enterprise Security Services, Host Based Security Services, Enterprise Vulnerability Scanning Services, and User Activity Monitoring (UAM).
Ability to modify feed creation to ingest customer logs in standardized formats to meet policy and compliance requirements.

Responsibilities

Troubleshoots new and existing data collection issues to ensure accurate and reliable ingestion of security-relevant data.
Diagnoses and resolves system issues that impact stability, performance, or usability.
Deploys, manages, and maintains supported and unsupported Splunk Add-ons required for specific data sources.
Develops and maintains documentation, including Body of Evidence (BOE) artifacts, engineering documentation, change management records, system security plans, and accreditation materials, as required.
Delivers a comprehensive Splunk deployment document detailing specifications, deployment methods, and architectural considerations for production environments.
Implements and maintains strict role-based access control to ensure data is accessible on a validated need-to-know basis.
Designs and deploys Splunk forwarders using centralized configuration management through the Splunk Deployment Server to support rapid and consistent deployments.