Role OverviewThe Cybersecurity Engineer develops and implements advanced cyber defense solutions for the agency, safeguards the infrastructure, and assures that the system is built to specification and is deployed successfully. The ideal candidate has strong expertise in log analysis, threat hunting, and writing Splunk queries to identify and contain malicious activity.
What You Will Do
Threat detection & monitoring, Splunk management, incident response, use case development, log integration, and compliance & reporting.
Why It Might Be a Fit
The ideal candidate is highly analytical and technically proficient, with strong expertise in log analysis, threat hunting, and writing Splunk queries. They should be able to operate calmly under pressure and manage multiple security tickets.
Requirements
- Minimum of 8+ years of hands-on experience in cybersecurity, specifically operating, building, and investigating threats within a SIEM or Splunk.
- Excellent critical thinking, problem-solving, and communication skills.
- Proficiency in writing SPL (Splunk Processing Language).
- Strong understanding of networking, firewalls, EDR, and cloud platforms (AWS, Azure, or GCP).
- Knowledge of security frameworks (e.g., MITRE ATT&CK) and security compliance standards (e.g., NIST, HIPAA, or SOC 2).
- Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field.
- Relevant certifications such as Splunk Core Certified User, Splunk Core Certified Advanced Power User, are highly preferred.
]]>