Cybersecurity Engineer Splunk - Top Secret

DescriptionXcelerate Solutions is seeking a Cybersecurity Engineer - Splunk that can correlate threat data from various sources to establish the identity and modus operandi of hackers active in client's networks and posing a potential threat. Provides the customer with assessments and reports facilitating situational awareness and understanding of current cyber threats and adversaries. Develops cyber threat profiles based on geographic region, country, group, or individual actors. Produces cyber threat assessments based on entity threat analysis. May provide computer forensic and intrusion support to high technology investigations in the form of computer evidence seizure, computer forensic analysis, data recovery, and network assessments. Researches and maintains proficiency in tools, techniques, countermeasures, and trends in computer network vulnerabilities, data hiding and network security and encryption. Come join our award-winning organization and work with some of the most talented and brightest minds in the GovCon industry.Location:Quantico, VA (telework flexibility at customer discretion)Security Clearance:Top SecretResponsibilities:Collaborates with intrusion analysts to identify, report on, and coordinate remediation of cyberthreats to the clientProvides timely and actionable sanitized intelligence to cyber incident response professionalsLeverages technical knowledge of computer systems and networks with cyber threat information to assess the client's security postureConducts intelligence analysis to assess intrusion signatures, tactics, techniques, and procedures associated with preparation for and execution of cyber-attacksResearch hackers, hacker techniques, vulnerabilities, exploits, and provides detailed briefings and intelligence reports to leadershipCoordinates with the Cyber Security and Operations teams to build dashboards and queries to assist with threat detection and incident responseParticipates in developing security-focused content for Splunk implementations across multiple network classifications on Department of Defense (DoD) networksAssists with designing log management and data ingest solutions while ensuring efficiency and scalabilitySupports the development of automation and scripting directly supporting data/threat analysisImplements and manages Splunk add-ons to enhance capabilities to include advanced threat detection and machine learningSupports the A&A authorization of the Splunk environmentMonitors system recovery processes to ensure security features and functions are properly restored and functioning correctly following outagesSupports implementation efforts for response/actions addressing operational and communication orders from governing organizationsProvides expert analysis of logs/alerts/records to prevent or detect anomalies or adverse eventsSupports the Government in the enforcement of suspected malicious activityParticipates in the change management process, including reviewing Change Requests and assisting in the assessment of security impact of proposed changesWorks on project teams responsible for engineering and packaging releases to integrate within the customer's production IT environmentGuides and advises government customer with Splunk best practice solutions and configurationsSupports a growing Cybersecurity team with occasional training evolutionsSupports RMF compliance requirements by analyzing processes and recommending solutionsCommunicates well, both written and verballyOther duties as assigned; associated with and/or in support of your primary role or program missionMinimum Requirements:Active Top Secret clearance: TS/SCI is highly preferredDoD 8570 (IAT II Level) certificationPosition requires on-site support at Quantico, VA with telework flexibility at customer's discretionHigh School with 10+ years (or commensurate experience)5+ years of managing Splunk and SIEM systems2+ years of security engineering experience working with DoD IT systems and solutions1+ years of experience with application and OS loggingExperienced with Splunk Enterprise operations to include:Configuration and system tuningAlert and report creationDeployment scalingUser Based Analytics implementation and reviewPreferred Qualifications:Active Splunk certification highly preferred (Architect/Developer level)Familiar with Splunk Enterprise operations to include:Overall enterprise deployment and implementationEndpoint troubleshootingSplunk account managementDeployment scalingDoD STIG dashboard creationATO of Splunk systems in DoD packagesAbout Xcelerate Solutions:Founded in 2009 and headquartered in McLean, VA, Xcelerate Solutions (www.xceleratesolutions.com) is one of America's fastest-growing companies. Xcelerate's culture is defined by our diversified workforce of dynamic and versatile professionals, supported with growth and development opportunities that contribute to individual and company growth. This strong commitment to our employees has been recognized by our inclusion on the Washington Business Journal's "50 Best Places to Work" list as well as being a "Great Place to Work" certified company with a 4.6 star, and a 99% CEO approval Glassdoor rating. Come find out why Xcelerate Solutions is one of the DC Metro top employers!Xcelerate Solutions is an Equal Employment Opportunity/Affirmative Action Employer. We evaluate qualified applicants without regard to race, color, national origin, religion, age, equal pay, disability, veteran status, sex, sexual orientation, gender identity, genetic information, or expression of another protected characteristic. As part of this commitment to the full inclusion of all qualified individuals, Xcelerate provides reasonable accommodations if needed because of an applicant's or an employee's disability.Pay Transparency Notice: Xcelerate Solutions will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant.

#J-18808-Ljbffr