Vacancy expired!
Overview
The Squires Group is looking for a Senior Level Splunk Engineer to support a large-scale cybersecurity program based in the Washington, DC area. (Work is currently remote, but candidates must be local to Camp Springs, MD.) In this role, you will develop and maintain a suite of tools including, but not limited to, Splunk Dashboards integrating existing and new data sources, Application Program Interface (APIs) connections with external systems, and further implement automation within the tool suite to include incorporating Swimlane and other similar tools. Per our Federal Government Contract, candidates must be U.S. Citizens and able to obtain a Government Public Trust clearance. Per the President's Executive Order 14042 passed in September 2021, all Federal contractors and subcontractors providing services to the government are required to have full COVID-19 vaccinations (whether onsite or remote), except in limited circumstances where a worker receives an approved medical or religious accommodation. Responsibilities- Design, develop, engineer, and implement solutions to support the client's Continuous Monitoring Program
- Design and implement functional requirements for new and existing Splunk Dashboards, consolidating data from multiple data sources internal and external to Splunk
- Interface with Enterprise Splunk Engineering Team to share lessons learned, coordinate on data sources and data integrity, and provide availability and integrity requirements to support the Continuous Monitoring Program
- Integrate automation into the application and systems monitoring processes
- Evaluate enterprise security risks and identify recommendations for maturing and evolving the client's Continuous Monitoring Program to facilitate proactive identification and mitigation of risk.
- Ensure the accuracy and availability of the Continuous Monitoring Dashboards, including lookup tables, are up-to-date and operating as intended
- Identify and implement new Splunk dashboards that provide the Continuous Monitoring program and Information System Security Officers with increased visibility into the risk present in government systems
- Integrate and manage APIs with authoritative data sources.
- Act as a liaison with other Branches within the client's organization to eliminate duplication of efforts and align strategic direction of tool suites to facilitate the goals of the Continuous Monitoring Program
- Provide Tier III user support for Continuous Monitoring dashboard and automated solutions
- Bachelor's Degree
- 5+ years of first-hand experience building dashboards and using Splunk Enterprise v 7.3 or higher
- Experience implementing automated solutions using Swimlane SOAR or similar tool
- Previous experience using tenable.io and Nexus IQ Server
- Ability to comprehend supporting processes of the client's Continuous Monitoring Program and advise on ways to incorporate automation
- Familiar with NIST SP 800-37 Risk Management Framework.
- Works well independently and possesses a solid understanding of cybersecurity concepts
- Per our Federal Government Contract, candidates must be U.S. Citizens and able to obtain a Government Public Trust clearance
Vacancy expired!