Lead Cyber Security Engineer
Core
Troubleshooting data collection issues, deploying and managing Splunk Add-ons, and producing security documentation for system stability and accreditation.
Role type
Lead Cyber Security Engineer (SIEM/Splunk focus)
Builds
Splunk production environments and security documentation
Domain
Cybersecurity / SIEM / Cloud Infrastructure
Required skills
Splunk administration, Linux systems administration, TCP/IP networking, network security concepts, Certification & Accreditation processes, DoD policy knowledge, role-based access control design, forwarder deployment, centralized configuration management
Preferred skills
Red Hat/CentOS Linux administration, AWS cloud environment experience, ICS 500-27 audit collection knowledge, Enterprise Security Services, Host Base Security Service, Enterprise Vulnerability Scanning Service, log feed creation
Technologies
AWS, Linux, Splunk, TCP/IP
Responsibilities
Troubleshoot data collection issues and resolve system stability problems, deploy and manage Splunk Add-ons for specific data sources, produce security documentation including system security plans and accreditation documents, design and deploy forwarders with centralized configuration management, maintain role-based access control solutions
Seniority
Lead, hands-on IC
