Job DescriptionMSTS is seeking an experienced candidate for the Principal Splunk Analyst (Principal Cyber Security Analyst). The Principal Splunk Analyst will play a critical role in safeguarding company infrastructure from cyber threats and attacks by delivering innovative solutions which enhance the capabilities of the Cyber Security section to detect and identify threat activity and system intrusions. The position is responsible for a range of Splunk development and configuration activities including system deployment, Splunk application implementation, data onboarding, and other Splunk integrations.
ResponsibilitiesKey Responsibilities- Manage the organizations Splunk environment providing fundamental knowledge of the Splunk license manager, indexers, and search leads.
- Lead a range of Splunk development and configuration activities including system deployment, Splunk app implementation, data onboarding, and other Splunk integrations.
- Mature and maintain premium Splunk applications to include Enterprise Security, SOAR (Security Orchestration, Automation, and Response) , International Technology Security and Innovation (ITSI) , as well as research new applications to modernize deployment.
- Develop SOAR playbooks to minimize security incident response time and develop advanced techniques to identify and mitigate vulnerabilities.
- Collaboratively design and implement custom Splunk solutions which satisfy project requirements.
- Use established standards, practices, and procedures as well as an increasing technical knowledge to solve problems and complete projects.
- Review current Cyber Security threat information and assist the Threat Hunter team with mitigating vulnerabilities identified.
- Collaborate with other outside Cyber Security interests such as Counterintelligence, other DOE sites, US CERT, and law enforcement.
- Assist with data calls, Federal Information Security Modernization Act (FISMA) reporting, compliance scanning and reporting, continuous monitoring, and compiling reports for auditors.
- Perform other duties assigned by Management.
Qualifications- Bachelor's degree or equivalent training and experience in a computer-related field and at least 8 years of related experience.
- Preferred Certifications (please upload certificates when applying):
- Splunk Enterprise Certified Architect
- Splunk Enterprise Security Certified Administrator
- Splunk SOAR Certified Automation Developer
- Splunk IT Service Intelligence Certified Administrator
- Ability to deploy, configure, and manage large-scale clustered Splunk environments via the command-line interface.
- Capability to onboard diverse data sources using various input techniques and centralized logging/filtering methods like syslog.
- Develop and maintain comprehensive health monitoring for large Splunk deployments and their associated data sources.
- Have a strong IT background encompassing Linux administration, networking fundamentals, and core cybersecurity principles protocols, and standards.
- Proficiency in DevOps practices and tools, including Git, Jenkins, Ansible, Jira, and configuration management within production environments.
- Solid software engineering foundation with experience in modern programming (Python, Bash, or PowerShell), design patterns, TDD, debugging, and Agile methodologies.
- Capability to develop SOAR playbooks and Splunk ITSI solutions, including service visualizations and network anomaly analysis, while adhering to security compliance frameworks and best practices.
- Can maintain strict confidentiality.
- Ability to communicate effectively in English, both verbally and in writing, sufficient to communicate with co-workers, customers, write clear and concise reports, gather information, and collect information.
- Capable of using multiple electronic devices including standard office machines, cellular phones, and security appliances.
- General understanding of cybersecurity controls used to mitigate vulnerabilities.
- The work location will be at the Losee Road facility in North Las Vegas, Nevada.
- Work schedule will be 4/10's Monday through Thursday (subject to change).
- Pre-placement physical examination, which includes a drug screen, is required. MSTS maintains a substance abuse policy that includes random drug testing.
- Must possess a valid driver's license.
Annual salary range for this position is:
$118,560.00 - $180,814.40.Starting salary is determined based on the position market value, the individual candidate education and experience and internal equity.
