EngineerJobs.io
← Back to all jobs
MANTECH

Principal Cyber Security Engineer

MANTECH
Chantilly, VA Full time Posted 6d ago
Cyber Security Cybersecurity Tools Data Security Information Security Information Technology (IT) InfoSec Log Management Security Security Compliance Security Information And Event Management Security Monitoring Security Operations Solution Architecture Splunk Splunk Siem
Apply Now

Job Description

MANTECH seeks a Principal Cyber Security Engineer for onsite work in Chantilly, VA supporting mission-critical cybersecurity operations.

Responsibilities

  • Troubleshoot new and existing data collection issues to keep security-relevant data ingestion accurate and reliable
  • Diagnose and resolve issues affecting system stability, performance, or usability
  • Deploy, manage, and maintain supported and unsupported Splunk Add-ons for specific data sources
  • Develop and maintain documentation and artifacts, including Body of Evidence (BOE) materials, engineering documentation, change management records, system security plans, and accreditation materials (as required)
  • Create and maintain a comprehensive Splunk deployment document covering production specifications, deployment methods, and architectural considerations
  • Implement and maintain strict role-based access control to ensure data access is limited to validated need-to-know users
  • Design and deploy Splunk forwarders using centralized configuration management via the Splunk Deployment Server to support consistent deployments

Requirements

  • Bachelor’s degree, or 4+ additional years of cyber experience in lieu of a degree
  • 7+ years of experience in a cybersecurity role
  • Experience with SIEM platforms and/or Splunk
  • Knowledge of Linux systems administration, general operating system security practices, TCP/IP networking, and network security concepts
  • Knowledge of Certification and Accreditation (C&A) processes
  • Knowledge of DoD policy and technical security guidance for information systems
  • DoD Directive 8570.1 IAT Level II certification or higher, or ability to obtain within six (6) months
  • Clearance: active TS/SCI with Polygraph

Preferred Qualifications

  • Experience with Linux distributions including Red Hat and CentOS
  • Experience with AWS or other cloud environments
  • Knowledge of ICS 500-27 audit collection requirements
  • Familiarity with Enterprise Security Services, Host Based Security Services, Enterprise Vulnerability Scanning Services, and User Activity Monitoring (UAM)
  • Ability to modify feed creation to ingest customer logs in standardized formats to meet policy and compliance requirements
  • Splunk certification

Technologies

  • Splunk
  • Splunk Add-ons
  • Splunk forwarders
  • Splunk Deployment Server
  • SIEM
  • Linux
  • TCP/IP

Physical Requirements

  • Must be able to remain in a stationary position 50% of the time
  • Occasionally moves about inside the office to access file cabinets, office machinery, or to communicate with co-workers, management, and customers via email, phone, or virtual communication, which may involve delivering presentations

Similar Jobs