Splunk/SIEM SME

Date Posted:

2024-10-29

Country:

United States of America

Location:

FL807: 640 Roberts Ave, Pensacola FL 640 Roberts Avenue Corry Station, Pensacola, FL, 32511 USA

Position Role Type:

Hybrid

You have been redirected to RTX’s career page as we have recently transitioned from RTX to become a standalone company, which provides us with greater autonomy and opportunities for growth. As a prospective employee of Nightwing, you’ll have the chance to contribute to our continued success and shape the future of our cybersecurity, intelligence, and services offerings.

Nightwing provides technically advanced full-spectrum cyber, data operations, systems integration and intelligence mission support services to meet our customers’ most demanding challenges. Our capabilities include cyber space operations, cyber defense and resiliency, vulnerability research, ubiquitous technical surveillance, data intelligence, lifecycle mission enablement, and software modernization. Nightwing brings disruptive technologies, agility, and competitive offerings to customers in the intelligence community, defense, civil, and commercial markets.

Nightwing is seeking a Senior Information Security Engineer to support the design, development, and deployment of advanced cybersecurity capabilities. This candidate will conduct the management, administration, troubleshooting and testing of all Splunk components, software, hardware, licensing, and all other aspects of the information system. Additionally, they will perform Operations and Maintenance (O&M) of the system. A critical aspect of the position will be ensuring the logging of mission and organizational data against unauthorized disclosure, accidental or intentional loss of data, or unauthorized modification. This NightWing position supports a U.S. Government customer on a large mission critical, development and sustainment program to design, build, deliver, and operate a network operations environment including introducing new cyber capabilities to address emerging threats.

Responsibilities include:

Applies current analytical and logical thinking to the design, architecture, development, evaluation, testing, and integration of computer systems, appliances, and networks involving the architecture and implementation of the Splunk product.

Applies attention to detail for out of the box thinking with a problem-solving mindset, be able to work under pressure, and be able to deliver on tight delivery schedules are recommended soft skills.

Displaying superb understanding and be knowledgeable with a multitude of technologies to include; firewalls, web application firewalls, VPNs, DNS, Data Loss Prevention, IDS/IPS, and proxies, to name a few.

Develops security systems for any manual or automated systems environments.

Ensuring the logging of mission and organizational data against unauthorized disclosure, accidental or intentional loss of data, or unauthorized modification.

 Administering the management of all Splunk components, software, hardware, licensing, and all other aspects of the information system, as well as, Operations and Maintenance (O&M) of the system

Providing Splunk administration, management, troubleshooting, and testing

Supporting Projects and Project management personnel throughout the full software development lifecycle

Managing technology roadmaps with each product and propose briefs and reports to elaborate on recommended actions based on best practices

Working with a variety of different tools and appliances, security problems, and troubleshooting various complex issues.

Performing full product testing to the length of the products capabilities as required by the customer and the program

Developing capabilities according to customer requirements and NIST, DHS, and Government guidelines and regulations

Required Skills:

An active TS/SCI is required

Must have active DHS suitability

6+ years of directly relevant experience

Experience and/or familiarity with the following network protection devices: Firewalls, intrusion detection and prevention systems (IDS/IPS), log analysis, malware analysis, network traffic flow and packet analysis

Experience managing and administering Splunk Enterprise Security, Splunk Cloud, and Splunk in the Cloud environments.

Support Projects and Project management personnel throughout the full software development lifecycle

Manage technology roadmaps with each product and propose briefs and reports to elaborate on recommended actions based on best practices

Perform full product testing to the length of the products capabilities as required by the customer and the program

Develop capabilities according to customer requirements and NIST, DHS, and Government guidelines and regu