Splunk/Cribl Engineer - Mid-Atlantic region (Remote in NC, VA, WV, MD, DC, DE, N

Note: This is a remote position but applicants located in our Mid-Atlantic region (NC, VA, WV, MD, DC, DE, NJ, or PA) are highly preferred.

Job Description

• Provide consulting services focused on Splunk or Cribl including on-premise, cloud, or Enterprise Security deployments
• Design, configure, maintain, and troubleshoot client specific environments
• Completes tasks in an efficient and timely manner with effective progress reporting and documentation
• Seeks innovative ways to improve the process of delivering focused solutions to clients
• Shares suggestions and knowledge capital to help optimize implementation methodology
• Develop security-focused content for Splunk, including threat detection logic and operational dashboards
• Regularly interface with customer technical and business staff, including the project sponsor and stakeholders in sometimes complex engagements
• Serve as the technical point of contact on customer engagements

Requirements:

• Bachelor’s Degree in information security (or similar field) with a minimum of 3 years of cybersecurity industry experience
• At least two years of Splunk/Cribl specific experience with knowledge in the following areas:
• Search and reporting
• Data parsing and normalization
• Creating dashboards and visualizations
• Basic scripting (Python, Bash)
• Data extraction techniques
• Routes, Pipelines, Functions
• Extensive knowledge of data security practices and systems including NIST, ATTCK, CIM Object Model, etc.
• Excellent communications and teamwork skills
• Excellent time management skills
• Splunk Consultant Certificate
• Cribl experience preferred but not required
• SOAR experience preferred but not required

Preferred Experience:

• BS/BA degree in Computer Science, Information Systems, related discipline, equivalent experience, or over 5 years’ experience
• 3-5 years of professional Splunk or Cribl engineering experience
• The ideal candidate will have macOS and Windows operating system experience, as well as scripting skills. Linux/Unix skills are a plus
• Strong analytical skills to define risk, identify potential threats, and develop and document action/mitigation plans
• Strong interpersonal skills, ability to mentor/train staff and bring awareness to current and emerging threats
• Ability to work efficiently and self-motivate with little to no supervision
• Strong written and verbal communications skills with an ability to present technical risks and issues to technical and non-technical audiences internal and external to the organization
• Regulatory experience is a plus (GDPR, ISO27K, SSAE16, HIPAA, PCI, etc.)