Job description

JOB SUMMARY:

Zivaro is seeking an experienced cyber security engineer who can handle the architecture and maintenance of a mature, multi-environment Splunk security incident and event management (SIEM) environment, both the hands-on activities associated with the toolset as well as applying new features and enhancement. Work is performed in a non-classified setting (for now) in Colorado Springs South, with remote/WFH flexibility as well. Later efforts will include classified efforts, on-site SCIF, w/ Secret clearance requirement. As a key participant, you will lead the development, implementation, and on-going maintenance of a maturing, innovative Splunk-based SIEM. The project delivery environment utilizes a customer-lead Agile framework, utilizing scrum and sprint time boxes, rituals, and practices.

• Position is F/T and requires travel 1 week/month, primarily Co Springs, CO

*
POSITION RESPONSIBILITIES: *

• Maintain and/or enhance existing Splunk-centric SIEM including Splunk Enterprise, and Splunk Enterprise Security
• Daily analysis of Splunk-derived metrics, system bugs and issues and customer requests utilizing a service management/issue platform
• Develop and implement value-added Splunk dashboard views to further improve overall cyber visibility, responsiveness and security
• Experience with Docker, Open Shift, Kubernetes, and Rancher helpful.
• Experience with ID management (IdM), active directory (AD) and related access credentials helpful
• Enhancing SIEM environments
• Maintain critical program cybersecurity posture with high up-time
• Perform Independent Security Assessment and Reporting (ISAR) activities
• Perform Security Technical Implementation Guide (STIG) and Federal Information Security Management Act (FISMA) assessments
• Task, track, and mitigate Plan of Action & Milestones (POA&M) vulnerability scan and security assessment findings requiring mitigation.
• Manage and infrastructure service account tracking repositories
• Operate and maintain (O&M) security assets that include –
• Security Information and Event Management (SIEM)
• Intrusion detection (IDS)
• Security audit log repositories and databases

• Familiarity with and/or willingness to adopt Atlassian/JIRA and Confluence project management tools, for maintaining documentation, schedules, and updates
• Participate in customer-lead content development
• Quarterly Dev Build (DB) capacity planning, architectural review

*
QUALIFICATIONS: *

• Previous experience deploying, maintaining, and enhancing Splunk SIEM.
• Strong System Administration (SA) experience
• Preferred 8+ years security system engineering, system operations & maintenance (O&M) Security Information & Event Management (SIEM), firewalls, Intrusion Detection Systems (IDS), audit log formatting/databases, and other types of data management technologies including but not limited to Splunk
• Application development using software development lifecycle (SDLC) process and tools
• Security system monitoring, syslog and traffic analysis, and incident response

*
EDUCATION & CERTIFICATIONS: *

• BS or equivalent, + 5 years related experience, or MS + 3 years related experience preferred

*
*
U.S. Citizenship is required for most positions at Zivaro due to security clearance requirements for government/federal contracts held by Zivaro.

_
EEO STATEMENT_
ZIVARO fully subscribes to the principles of Equal Employment Opportunity. It is our policy to provide employment, compensation and other benefits related to employment based on qualifications, without regard to race, color, religion, national origin, age, sex, veteran status, disability, sexual orientation, gender identity or any other basis prohibited by federal, state or local law. In accordance with requirements of the Americans with Disabilities Act, it is our policy to provide reasonable accommodation upon request during the application process to eligible applicants in order that they may be given a full and fair opportunity to be considered for employment. As an Equal Opportunity Employer, we intend to comply fully with applicable federal and state employment laws and the information requested on this application will only be used for purposes consistent with those laws.

Job Type: Full-time

Pay: $150,000.00 - $170,000.00 per year

Benefits:

• 401(k)
• Dental insurance
• Health insurance
• Paid time off
• Vision insurance

Schedule:

• 8 hour shift

Work Location: One location

www.arclintfl.com is the go-to platform for job seekers looking for the best job postings from around the web. With a focus on quality, the platform guarantees that all job postings are from reliable sources and are up-to-date. It also offers a variety of tools to help users find the perfect job for them, such as searching by location and filtering by industry. Furthermore, www.arclintfl.com provides helpful resources like resume tips and career advice to give job seekers an edge in their search. With its commitment to quality and user-friendliness, www.arclintfl.com is the ideal place to find your next job.