Cybersecurity Engineer (Splunk)

Description

Salary Range: Various factors are considered in determining final pay for a position, including, but not limited to, relevant work experience, skills, education, certifications, and competencies that align with the specified role, as well as contract provisions regarding labor categories that are specific to the position. The pay range for this position is: $155,000-$165,000

Clearance: Active Top Secret clearance

Conditions

Who We Are

Horizon Industries Limited (Horizon) is a dynamic IT and Management Consulting firm based in the Washington, DC area. Founded in 1996, Horizon Industries Limited (Horizon) has evolved into a company of highly qualified professionals that provides full-cycle IT Consultant and Management support in both the private and public sectors.

Horizon’s culture is based on our core values, and we PRIDE ourselves on a diverse, employee, and family-centric approach.

Who we are looking for:

If you are looking for a challenging cybersecurity opportunity that allows you to develop and learn in a stable and growing organization…come join us as a Cybersecurity Engineer at Horizon. Horizon Industries Limited (Horizon) is a dynamic IT and Management Consulting firm based in the Washington, DC area, and we are currently seeking a Cybersecurity Engineer for a full-time position supporting the Defense Logistics Agency (DLA) on-site in Columbus, OH, or Richmond, VA.

Performs a variety of routine project tasks applied to specialized cybersecurity problems. Tasks involve integration of electronic processes or methodologies to resolve total system problems, or technology problems as they relate to cybersecurity requirements. Analyzes information security requirements. Applies analytical and systematic approaches in the resolution of problems of workflow, organization, and planning. Provides security engineering support for planning, design, development, testing, demonstration, and integration of information systems. Analyzes threat information gathered from logs, Intrusion Detection Systems (IDS), intelligence reports, vendor sites, and a variety of other sources. Creates customized dashboards using the Security Information and Event Management (SIEM) tool Splunk ES to elevate high-threat items to incident responders. Administration knowledge of the Splunk ES and backend database infrastructure related to upgrades and daily maintenance is essential. Provide analysis and make recommendations in line with the roles of CERT Incident Handlers (IH) and site Information Assurance Managers (IAM). Develop ES rules, reports, dashboards, data monitors, active channels, trends, and use cases to identify threats and optimize data mining across DLA. Will research, plan, install, configure, troubleshoot, maintain, and back up all components in the DLA Splunk Enterprise Log Management (ELM) architecture.

Minimum Experience:

Seven (7) years of relevant IT experience

Primary DCWF Work Role 521: Cyber Defense Infrastructure Support Proficiency Level: Intermediate (any of the following): Security+, CySA+, CEH, SSCP, GSEC, GMON, Cloud+, or PenTest+.

Secondary DCWF Work Role 451: System Administrator Proficiency Level: Intermediate (any of the following): Security+, Cloud+, GSEC, GICSP, or SSCP.

Computing Environment: Linux+, Splunk Administrator

Experience creating custom dashboards and reports in Splunk using threat data.

Experience in the integration and sustainment of Splunk Core and Splunk Enterprise Security (ES).

Why you will love working with us/ Perks

A comprehensive benefits package including healthcare (medical, dental, vision and disability)

a 401k program where you are 100% vested from day one with an employer match after 90 days.

an Educational Assistance program.

a Student Loan Repayment Program

Gym Reimbursement Program.

Paid Time off

Dynamics, passionate, multi-disciplinary team of creative minds to work with and many more.

EOE/Vet/Disabled