Enterprise Logging Solution (ELS) Engineer (Senior)

Description

The senior security engineer supports the Enterprise Logging Solution (ELS) and SIEM environment, which strengthens the agency's central security monitoring and reporting.

The role covers architecture, implementation, and day-to-day operations across on-premise and cloud systems, with a focus on meeting security regulations and adding machine learning and artificial intelligence capabilities.

The company is a technology firm dedicated to US federal government clients in defense, national security, public safety, civilian, and military health. It has over 13,000 people.

The team works on projects that change how federal agencies operate and serve their missions.

Responsibilities

• Evaluate and build out ELS/SIEM improvements using established methods, and run gap reviews on a regular basis.
• Move the ELS/SIEM architecture to the cloud and on-premise systems, and design streaming pipelines to bring in data.
• Write implementation and communication plans for changes, lead configuration testing, and bring change requests to the Change Control Board.
• Bring new systems onto the ELS/SIEM with the System Owners and the Government ELS Team Lead.
• Build dashboards for System Owners, ISSM/ISSOs, executives, and developers, and keep the Master Project Schedule current with a review every two weeks.
• Keep data flowing into the SIEM from sources such as IDS, firewalls, and vulnerability scanners, and run the streaming ingestion tools.
• Write correlation rules and risk-based scoring updates, and manage whitelists and blacklists to keep the SIEM running well.
• Integrate machine learning and AI capabilities into the agency's ELS/SIEM.
• Support users of the ELS/SIEM dashboards and respond to outages and data feed problems.

Requirements

• Minimum 7 years of experience in system administration, database administration, network engineering, software engineering, or software development with a focus on cyber security, or 5 years of such experience with a bachelor's degree in a related field.
• Active TS/SCI clearance, required because of elevated-access programs.
• Splunk Certified Architect certification.
• Splunk Certified Admin certification.

Conditions

The pay range of $94,000 - $187,600 USD applies to roles in California, Colorado, Connecticut, Hawaii, Illinois, Maine, Maryland, Massachusetts, Minnesota, New Jersey, New York, Ohio, Vermont, Virginia, Washington, and the District of Columbia.

Pay varies by office location, role, skill set, and experience level.

Applications are accepted on an ongoing basis with no fixed deadline.

The company provides equal opportunity to all applicants.

Benefits

• The company offers a wide range of benefits, and details are available on request.