Description & Requirements
ManTech is seeking a motivated, career and customer-oriented Cyber Security Engineer Senior, serving as a Splunk Engineer to join our team in the Chantilly, VA location.
Responsibilities include, but are not limited to:
Responsible for day-day operation of large Splunk environment.
Troubleshooting new and current data collection issues
Troubleshooting system issues that make the system unstable or unusable.
Deployment and Managing all supported and unsupported Splunk Add-ons that are required for specific data sources
Responsible for Splunk Upgrades to all Splunk Enterprise servers
Integrations with other systems via API or other similar methods
Provide documentation such as body of evidence documents (as needed), engineering documents, change management documents, system security plans, and accreditation documents
Deliver a comprehensive Splunk deployment document to detail the specifications, deployment methods, and other architectural considerations to the production environment.
Maintain a strict role-based access control solution around the data collected, to provide a need-to-know ability
Forwarder Configurations and Deployments: Design and deploy forwarders rapidly with centralized configuration management (Splunk Deployment Server).
Oversee Knowledge Object Management such as CIM management and tuning
Oversee Enterprise Security configurations and tuning
Experience in the use of network monitoring tools with a strong understanding of network protocols
Ability to perform security analysis, development and implementation of security policies, standards and guidelines
Ability to work collaboratively
Strong Organizational skills are required
Basic Qualifications:
7+ years of experience
Bachelor’s degree or 4 additional years of experienc
5+ years working in an Enterprise environment as a cyber engineer, system administrator or other security personnel
3+ years of Splunk experience
3+years of Splunk Enterprise Security experience, and other security tools
Experience with both the Unix and Windows operating systems
Have a minimum of a DoD 8570 IAT Level II.
Preferred Qualifications:
Hold the following Splunk certifications: Architect, Consultant I, Consultant II, Admin, Power User
5+ years of experience with scripting languages (bash), application development (Java, Perl, Python, .NET), databases and analytical tools
Experience with security and operational related use cases is desired
Security Clearance Requirements:
Must possess an active TS/SCI w/polygraph.
Physical Requirements:
Must be able to remain in a stationary position 75% of the time
Constantly operates a computer and other office productivity machinery, such as a calculator, copy machine and computer printer
Must be able to view and detect information on a computer screen