Description
As a Cybersecurity Analyst with a Splunk focus, you will provide cyber security and vulnerability management support for a suite of DOE business applications.
You will support DOE’s Corporate Business Systems, used by over 14,000 users to fulfill the agency’s mission to promote energy independence, progress scientific research, and protect the nation through nuclear security.
You will be part of a 60+ person full-service application delivery team supporting DOE on multiple task orders under our Blanket Purchase Agreement (BPA).
Responsibilities:
- Gather and organize technical information about an organization's mission goals and needs, IT infrastructure and existing security/IA products.
- Assist in development and application of security/IA policies, procedures, and standards.
- Work with customers to minimize risks and assess and secure applications and databases.
- Leverage experience in cloud platforms and technologies including cyber security, information assurance, network security, computer information systems, computer science, or management information systems.
- Identify data patterns, provide metrics, diagnose problems, and provide intelligence for business operations using tools such as SPLUNK, DBProtect, and Burp-Suite.
- Leverage Security Information and Event Management (SIEM) systems and processes in the delivery of cyber-security services.
- Develop Splunk dashboards and visualizations to highlight application and database alert conditions.
- Establish application and database logging standards in support of government mandates.
- Design and customize complex search queries and promote advanced searching, forensics, and analytics.
- Develop and document configuration standards, policies, and procedures for operating, managing, and ensuring the security of a Splunk infrastructure.
- Develop dashboards, data models and visualizations, reports, and performance optimization.
- Develop documentation on new or existing systems.
- Execute and interpret vulnerability scans, and collaborate with system owners to address vulnerabilities.
- Apply diagnostic techniques to identify problems, investigate causes, and recommend solutions.
Requirements:
- Bachelor’s degree in Computer Science, Information Systems, Engineering, Business, or other related discipline with 5+ years of increasingly responsible and relevant experience in defining security requirements.
- 3.5+ years of hands-on experience with Splunk design and administration.
- Understanding of common hacking techniques and effective countermeasures.
- Experience with Oracle and Microsoft SQL Server databases and their security configurations.
- Good team player, able to manage multiple assignments, and adapt to changing client needs.
- Must be able to obtain and maintain a DOE Clearance and successfully pass a thorough Government background screening process.
- US Citizenship.
Desired Qualifications:
- Experience with Trustwave DBProtect, Burp Suite.
- Certified Splunk Enterprise Administrator.
- Demonstrated experience in IT best practices regarding application, enterprise system, and network security.
- Experience with Anti-Virus, Intrusion Detection/Protection Systems, Firewalls, Active Directory, Vulnerability Assessment tools, and other security tools found in large network environments.
- Previous Department of Energy experience.
Benefits:
- Full-flex work week.
- 401K with company match.
- Customizable health benefits packages.
- Collaborative teams of highly motivated critical thinkers and innovators.
- Internal mobility team dedicated to helping you own your career.
- Rewards program for high-performing employees.