Cybersecurity Engineer IV w​/Secret Clearance

We are seeking a Cybersecurity Engineer IV.

REQUIRED QUALIFICATIONS

Experience

• Minimum of seven (7) years of relevant IT experience.

• Experience crating custom dashboards and reports in Splunk using threat data.

• Experience in the integration and sustainment of Splunk Core and Splunk Enterprise Security (ES)

• Demonstrated experience supporting government agencies, customers, or contracts within federal environments. This includes the Intelligence Community (IC), Department of Defense (DoD), Federal Civil agencies, and military organizations. Prior experience supporting the same or similar contract, with an in-depth understanding of the customer environment, requirements, and operational landscape, is highly desirable.

Certifications

8140 Requirements:Dod Cyber Workforce Framework (DCWF) Work Role 521:
Cyber Defense Infrastructure Support Specialist — Intermediate. Candidates must satisfy this requirement through one of the following pathways:

• BA/BS in Information Technology, Cybersecurity, Computer Science, Information Systems, Data Science, or Software Engineering

Or

• Approved DCWF 521 certifications: (at least one of these certifications)
  • Certified Ethical Hacker (CEH)
  • CompTIA Cloud+
  • CompTIA Cybersecurity Analyst (CySA+)
  • CompTIA Pen Test+
  • CompTIA Security+
  • GIAC Continuous Monitoring Certification (GMON)
  • GIAC Response and Industrial Defense (GRID)
  • GIAC Security Essentials Certification (GSEC)
  • Systems Security Certified Practitioner (SSCP).

Or

• Approved DCWF Work role 521 Military Training

AND

DoD Cyber Workforce Framework (DCWF) Work Role 451:
System Administrator - Intermediate. Candidates must satisfy this requirement through one of the following pathways:

• BA/BS in Information Technology, Cybersecurity, Computer Science, Information Systems, Data Science, or Software Engineering

Or

• Approved DCWF 451 certifications: (at least one of these certifications)
  • CompTIA Cloud+
  • CompTIA Security+
  • GIAC Global Industrial Cyber Security Professional (GICSP)
  • GIAC Security Essentials Certification (GSEC)
  • Systems Security Certified Practitioner (SSCP)

Or

• Approved DCWF Work Role 451 Military Training.

AND

Computing Environment Certification

• Linux+
• Splunk Administrator

Clearance

• Secret with IT-I (Tier5)

RESPONSIBILITIES

• Performs a variety of routine project tasks applied to specialized cybersecurity problems.

• Tasks involve integration of electronic processes or methodologies to resolve total system problems, or technology problems as they relate to cybersecurity requirements.

• Analyzes information security requirements.

• Applies analytical and systematic approaches in the resolution of problems of workflow, organization, and planning.

• Provides security engineering support for planning, design, development, testing, demonstration, integration of information systems.

• Analyzes threat information gathered from logs, Intrusion Detection Systems (IDS), intelligence reports, vendor sites, and a variety ofother sources.

• Creates customized dashboards using Security Information and Event Management (SIEM) tool Splunk ES to elevate high threat items to incident responders.

• Administration knowledge of the Splunk ES and backend database infrastructure related to upgrades and daily maintenance is essential.

• Provide analysis and make recommendations in line with the roles of CERT Incident Handlers (IH) and site Information Assurance Managers (IAM).

• Develop ES rules, reports, dashboards, data monitors, active channels, trends and use cases to identify threats and optimize data mining across DLA. Will research, plan, install, configure, troubleshoot, maintain and backup all components in the DLA Splunk Enterprise Log Management (ELM) architecture.

WORK ENVIRONMENT

The work environment characteristics described here are…