Data Integration Engineer/ Developer

We are seeking qualified Cyber Security Data Integration Engineer/ Developer to support the design, development, and deployment of advanced cybersecurity capabilities.Eligibility :Must be a US CitizenMust have an active TS/SCI clearance.Must be able to obtain Client Suitability prior to starting employment6+ years of directly relevant experience4+ years of experience with administration of enterprise SIEM technologies ( Splunk primarily)Responsibilities :The Security Engineer is to play a key role in supporting a statewide program providing cyber assessment services and management that will protect 20+ affiliates from growing and evolving cyber threats. The engineering effort will focus on cloud security, SIEM and log management, and endpoint detection/response protecting customers from the ever growing and evolving cyber threats. This person will also work with customers to ensure the organization's compliance standards are met and maintained while also driving solid customer relationships to the next level.

This position requires a thorough understanding of network architecture fundamentals, protocols, routing, firewalls, cloud, and DevOps. This position is part of a larger team; however, the candidate is expected to work well on his or her own under general supervision, be self-directed, able to multi-task, and prioritize work.Required Skills:

Splunk Cloud experience: Architect, design, engineer, support, configure, administer content and maintain infrastructure for a highly available and disaster recovery configurationSplunk experience: Administer Splunk and Splunk Application for Enterprise Security log or event managementExpertise with EDR toolsets - administration, analysis, and integrations preferably CrowdStrikeFamiliarity with SOAR Products include Phantom and ThreatConnectExperience with scripting (e.g., PowerShell, bash/ksh/sh,python)bility to assist team with Incident response and handlingExcellent demonstrated experience in communicating technical information to non-technical and technical audiences.Experience working directly with senior leadership and management.Desired Skills:

utomation: Experience related to Ansible for performing administration using code and Git/Gitlab for workflow managementFamiliarity with Windows and Linux integration, SQL database technologies, troubleshooting, deployment, patching, and administrationExperience with Logstash and ability to collect, parse, and transform logsExperience with the standards compliance process (e.g., NIST) and writing network security documentationDesired Certifications : Splunk IT Service Intelligence Certified Admin, Splunk Enterprise Security Certified Admin, Splunk Cloud Certified Admin, CCNA, CCNP), NCSP 800-53 PractitionerRequired Education : Bachelor's degree in Information Security, Cyber Engineering or a related discipline is required. Two years of related work experience may be substituted for each year of degree-level education.