Experience Inc. Jobs

Senior Splunk Engineer

Arlington, Virginia

Remote Local

Contract

$60/hr - $65/hr

Senior Splunk Engineer

The company is looking for creative individuals interested in helping grow something truly unique in their markets. While the ideal candidate is great at independently getting their work done, at the same time they are a team player who readily and proactively contributes to team activities to both the team and client’s consistent satisfaction.

This position is a 6-month contract to hire and is remote, local. The candidate must be local to the D.C. Metro Area.

What You Will Be Doing:

• Document the flow of data and identify multiple distinct data sources where suspicious behavior can be identified – must also be able to identify supplemental sources where similar data may be found.

• Investigate an incident, develop/communicate a timeline, and identify multiple scenarios based on the investigation.

• Review existing security events and lead in the development of refinements as necessary.

• Participate in the development of technical security standards to support policies including monitoring standards and incident investigation procedures.

• Respond to security requests from customers.

• Handle ad-hoc requests from leadership.

Required Skills & Experience:

• Subject Matter Expert (SME) on two (2) or more of the following: Log Analysis/Event Detection, Malware Analysis, Cloud Security, Network Access Control, Security Automation, Incident Response, Detection Engineering, Cyber Threat Hunting.

• Investigate an incident, develop/communicate a timeline, and identify multiple scenarios based on the investigation.

• Ability to identify new data sources for determination of security events:

• Analyze raw data sources to extract, institutionalize, and document actionable events.

• Review existing security events and propose refinements, automation, and/or broaden handling capabilities as appropriate.

• Ability to communicate the status of security:

• Identify and report on metrics related to the operations of the team.

• Identify and report on project status related to augmenting detection ability.

• Ability to work with security tools that emulate adversary-like actions and personnel to develop, document, and test detection mechanisms and to close the loop by working with the applicable teams to improve security by resolving findings.

• Ability to develop detailed multi-month and resourced project plans providing timely updates.

• Work with executive management to determine acceptable levels of risk for the enterprise.

• Ability to lead in the development of technical security standards to support policies including monitoring standards and incident investigation procedures.

• Interact with other stakeholders in the community for troubleshooting/content development/etc. This interaction could include other members of other members of cybersecurity, the networking team, systems administrators, technology support partners, etc.

• Ability to handle quality assurance on events and escalations, including performing triage and root cause analysis on security events. ?

• Ability to support incident response and hunt activities – from performing active analysis, to developing and documenting additional detections, to developing an after-action plan and tracking its implementation.

Applicants must be currently authorized to work in the United States on a full-time basis now and in the future.

This position doesn’t provide sponsorship.

You will receive the following benefits:

• Medical Insurance - Four medical plans to choose from for you and your family

• Dental & Orthodontia Benefits

• Vision Benefits

• Health Savings Account (HSA)

• Health and Dependent Care Flexible Spending Accounts

• Voluntary Life Insurance, Long-Term & Short-Term Disability Insurance

• Hospital Indemnity Insurance

• 401(k) including match with pre and post-tax options

• Paid Sick Time Leave

• Legal and Identity Protection Plans

• Pre-tax Commuter Benefit

• 529 College Saver Plan

Motion Recruitment Partners is an Equal Opportunity Employer, including Veterans/Disability/Women. All applicants must be currently authorized to work on a full-time basis in the country for which they are applying, and no sponsorship is currently available. Accommodation will be provided in all parts of the hiring process as required under Motion Recruitment Employment Accommodation policy. Applicants need to make their needs known in advance.

Posted by: Ashton Corbett

Specialization: Cloud Engineer