What are the responsibilities and job description for the Computer Systems Security Analyst - Splunk position at Cybercore Technologies?
JOIN THE CYBERCORE TECHNOLOGIES TEAM
We are Growing! Bring Your Technical Capabilities, Enthusiasm, and Team Focus!
Opportunity for a Computer Systems Security Analyst (Splunk).
Job Description:
- Write complex SPL to develop Advanced Splunk Dashboards and Queries.
- Perform on-boarding of data via Splunk Tools and Automation method.
- Work with customers to develop custom content, maintaining consistently high quality communications with the Client.
- Create Splunk Dashboards and Queries
- Familiar with automating in Splunk
- Develop scripts and code with security tools.
- Develop processes and schedule to review existing methodologies and queries for all divisional metrics.
- Become knowledgeable on the CDM technical requirements for the CDM program.
- Involved in a wide range of security issues including architectures, firewalls, electronic data traffic, and network access.
- Design, manage, and maintain agency SIEM infrastructure to improve data ingestion processes, including architectural work on data pipelines to ensure optimal flow of data.
- Maintenance, configuration, and implementing products, appliances and devices on the network.
Required Candidate Qualifications:
- US Citizenship Required and ability to obtain and maintain a Public Trust
- Bachelors Degree and 7 experience; or Masters Degree and 5 years of relevant Cyber Security experience; or 11 years experience in lieu of Degree.
- Active Splunk Core Certifications of User, Power User and Admin
- Minimum 3 years of experience developing and tailoring reporting from network security tools.
- At least 6 years experience using Splunk (specifically Splunk Scripting and on-boarding of large collection of meta data from different sources into Splunk.
- At least 4 years of experience with:
- In depth knowledge of designing, upgrading, maintaining, and implementing network devices on a large scale enterprise.
- Coordination and communication with other remotely deployed team members
- Developing documentation with processes and procedures.
- Proposing, implementing automation features in a large enterprise environment.
- At least 2 years experience with:
- Splunk Enterprise Security product.
- Risk-based Alerting.
- Analytics Driven Security
CyberCore has, on many occasions, expressed support and commitment to the principles of diversity and equal employment opportunity. It is CyberCore’s policy to recruit, hire, train, and promote individuals, as well as administer all personnel actions, without regard to race, color, national or ethnic origin, age, religion, disability, sex, sexual orientation, gender identity and expression, veteran status or any other characteristic protected under applicable federal or state law. CyberCore will not tolerate unlawful discrimination and any such conduct is prohibited. CyberCore is committed to ensuring that CyberCore’s workforce and volunteers reflect America’s diverse population. CyberCore knows that such diversity will enrich the company with the talent, energy, perspective and inspiration we need to achieve our mission.