Senior Cybersecurity Architect/Engineer

Job Description

Join LS Technologies, a Tetra Tech Company, in advancing your cybersecurity career! We're actively seeking a seasoned Senior Cybersecurity Architect/Engineer to join our team supporting the Federal Aviation Administration (FAA). In this pivotal role, you'll lead the migration from ArcSight to Splunk and implement SOAR within a large federal environment, providing strategic guidance and expertise in cybersecurity in the interest of aviation safety. If you have a proven track record in architecting and engineering large implementations in the Federal domain, we want you on our team!

Responsibilities

• Lead the design, planning, and execution of a large-scale migration from ArcSight to Splunk SIEM, ensuring adherence to strict Federal security protocols.
• Develop a comprehensive migration strategy considering data mapping, normalization, transformation, and compliance requirements (e.g., FISMA, FedRAMP).
• Configure Splunk for security analytics, including event forwarding, indexing, searching, and reporting to meet compliance standards.
• Integrate Splunk with existing security tools and infrastructure, creating a single pane of glass for cybersecurity analysts.
• Design and implement Splunk SOAR playbooks to automate incident response workflows, aligning with Federal incident response procedures.
• Develop and maintain ArcSight and Splunk dashboards and reports for security monitoring/threat hunting tailored to Federal security needs.

Education

• Bachelor's degree in engineering (civil, electrical, electronic, chemical, industrial, mechanical, aeronautical, or computer from a college or university with a degree curriculum accredited by the Accreditation Board for Engineering and Technology (ABET) and 15 years of experience. Master's Degree in related field may be substituted for bachelor's degree and 3 years' experience. PhD in related field may be substituted for bachelor's degree and 7 years' experience.

Qualifications

• Minimum of 10+ years of experience as an ArcSight or Splunk Architect or Engineer, with a proven track record of success in large-scale deployments within the Federal space.
• Expertise in designing complex Splunk deployments, including distributed architectures, high availability, and disaster recovery solutions. Covering index sizing and management, data retention and access controls, and scaling Splunk deployments.
• Development of Splunk apps and add-ons using the Splunk software development kit (SDK) for Python and JavaScript utilizing Splunk search processing language (SPL), creating custom search commands and visualizations, and for Splunk Enterprise.
• Experience with various Splunk deployment architectures, indexers and search heads, authentication and authorization, and data inputs and forwarders.
• Strong understanding of Splunk SOAR and its application for security automation.
• Expertise in security event correlation, log management, threat intelligence, and compliance with Federal security regulations and frameworks (FISMA, FedRAMP).
• Extensive understanding of network security, OT/IT infrastructure, and Federal security protocols.
• Familiarity with REST APIs, SQL, NoSQL, and Regular Expressions.
• Minimum Secret clearance

Preferred Qualifications

• Credentials such as CompTIA Security+ and/or Certified Information Systems Security Professional (CISSP), Splunk Certified Architect (SCA), Splunk Certified Consultant (SCC).
• Extensive knowledge of NIST SP 800-53 Rev5 controls and their practical application.
• Proven track record of collaborating with at least one of the FAA's Federal partners, such as CISA, DOD, DOE, DHS, or DOJ.
• Superior communication and collaboration skills, with the ability to effectively work with cross-functional teams across Federal agencies.

Work Requirements:

• Work location: Remote/Hybrid
• Work Hours: Standard Business Hours (Flexible)
• Travel: 0-50%

About LS Technologies

At LS Technologies, a Tetra Tech company, we're enhancing our nation's critical infrastructure by providing engineering, technical, and professional services to Federal Government agencies. The quality of our work, deep technical expertise,