Splunk Core & Enterprise Security Admin

Job Title: Splunk Core & Enterprise Security Admin

Location: Portland, OR (Relocation Assistance Provided)

Duration: Perm/Direct Hire

Pay Rate: $130,000 - $160,000

Job Description:

• Identify, analyze, and assess enterprise information assurance and security standards.
• Analyze cybersecurity vulnerability analytics.
• Develop and implement information assurance standards and procedures.
• Identify, report, and resolve security vulnerability and security violations.
• Establish and satisfy information assurance and security requirements based upon. the analysis of user, policy, regulatory, and resource demands.
• Implement and maintain security postures within complex network architectures.
• Apply Security Technical Implementation Guides (STIG) levels on all servers, workstations, and laptops.
• Provide support via scripts / scripting.
• Monitor the implementation of and compliance with RMF standards to ensure uniform application of the standards and consistency in security of accredited systems.
• Develop risk management guidelines that are based on the RMF standards of NIST SP 800-37.

Requirements:

• At least five (5) years of related Splunk Engineering experience.
• Splunk Core Consultant and Enterprise Security certification required.
• Knowledge with automation scripting for vulnerability mitigation and repeatable processes.
• Knowledge of Cyber detections tools, i.e., HBSS and ACAS.
• Experience/knowledge of Splunk, Elastic Search, Spark, Hadoop and Kafka.
• Experience with monitoring, collecting server logs, firewall logs, intrusion detection logs, and network traffic utilizing Splunk, ArcSight, or Elastic Search.
• Knowledge of the DoD vulnerability scanning requirements utilizing DOD DRSI Standards and Tools.
• Strong understanding of data warehouse concepts.
• Knowledge of dashboards utilized for delivering technical reports and formal papers on test findings.
• Experience in Linux, Windows Server 2008 and higher, VMWare, Citrix, and any other Cloud Services Platform such as Microsoft Azure, Amazon Cloud Services.
• Knowledge of and comprehension on how to implement 8570.01-M./DoD 8140.
• Experience working with large structured, semi-structured or unstructured datasets and transforming and combining those data sets for exploration and modeling.
• Experience implementing and utilizing predictive analysis and histogram trending in a production setting.
• Experience with deploying patch and hot-fixed mitigation implementations with deadlines for various Operating System Platforms utilizing tools such as Red Hat Satellite Server, YUM Server, Microsoft SMS, Group Policy, PowerShell scripting, Tanium or Puppet.
• Familiarity with ACAS and DISA Risk Score calculations.