Cyber Security Data Engineer

Job Description

Description of Work :

Our Federal Client is seeking a Cyber Systems Engineer who will oversee the collection, storage and interpretation of cyber security data to enhance the Continuous Diagnostics and Mitigation (CDM) Program.

Their duties will include sifting through data points to create organized categories, formatting data into other cyber security tools, comparing data points to current company processes, and writing reports outlining business predictions or proposals.

Duties and Responsibilities :

• Responsible for monitors, analyzes, and detects cyber events and incidents within information systems and networks under general supervision.
• Assists with integrated, dynamic cyber defense, coordinates and maintains security toolsets to support organizations’ continuous monitoring and ongoing authorization programs.
• Establish a framework by which cyber risk can be measured and quantified in the marketplace.
• Determine security requirements by evaluating business strategies and requirements; researching information security standards;

conducting system security and vulnerability analyses and risk assessments; studying architecture / platform identifying integration issues; preparing cost estimates.

Implement security systems by specifying intrusion detection methodologies and equipment and software installation and calibration;

preparing preventive and reactive measures; creating, transmitting, and maintaining keys; providing technical support; completing documentation.

• Verifying security systems by developing and implementing test scripts.
• Maintaining security by monitoring and ensuring compliance to standards, policies, and procedures; conducting incident response analyses;

developing and conducting training programs.

• Responsible for the design, development, implementation, and integration of a DoD IA architectures, systems, or system components for use within computing, network, and enclave environments.
• Ensuring that the architecture and design of development and operational systems are functional and secure. This includes design for program of record systems and special purpose processing node with platform IT inter connectivity.

Requirements

Basic Qualifications :

Minimum knowledge, skills, abilities needed.

• Bachelor’s degree and 5 years of experience, Master's degree and 3 years of experience, or 9 years of experience in lieu of a degree
• Minimum 4-6 years of experience performing tagging data
• Minimum 4-6 years of experience working with data source sensor tools to collect data points

Minimum 4-6 years of experience building out data pipelines and establishing Data connections

• Minimum 4-6 years of experience in creating data pipelines to allow transfer of data from data source to I / O through Splunk
• Minimum 4-6 years of experience developing integrators / integrations (between Splunk, DbConnect, Xacta)
• Minimum 4-6 years of experience aggregating various types of data (Splunk, Xacta, DbConnect. CDM, etc.) and ability to create key value pairs
• Minimum 3 years of experience with ETL coding using Python

Minimum 3 years of experience in capture all interface designs in a common interface control format, and store interface data in a commonly accessible repository

• Minimum 3 years of experience creating / producing process / procedural documentations (e.g. data dictionaries, Common Vernacular Documentation)
• Minimum 3 years of experience with obtaining an Authority To Operate (ATO)
• Must be able to obtain and maintain a US Public Trust clearance.

Preferred Qualifications :

Candidates with these skills will be given preferential consideration.

• Knowledge of Cyber Security Risk Assessment, governance, and reusable data model
• Exceptional knowledge of Splunk and Xacta.IO products
• Extensive experience with Python coding
• Exceptional technical writing skills
• Ability to communicate complex data in a simple, actionable way
• Ability to visualize data in the most effective way possible for a given project or study
• Analytical and problem-solving skills
• Experience with machine learning and AI

Familiarity with data management tools

• Ability to work independently and with team members from different backgrounds
• Excellent attention to details

Requirements

Basic Qualifications : Minimum knowledge, skills, abilities needed. Bachelor’s degree and 7 years of experience, Master's degree and 5 years of experience, or 11 years of experience in lieu of a degree At least 4 years’ experience using customer-focused Splunk Enterprise Security SIEM engineering background - SME knowledge of ES v4.

7 At least 4 years’ experience in a senior Splunk role working in a Splunk clustered environment supporting SOC or NOC environments At least 4 years of experience with : In-depth knowledge of designing, upgrading, maintaining and implementing network devices on a large-scale enterprise Direct experience with Splunk Engineering and data integration Prior SIEM data modelling experience on similar platform at scale (>

50 servers) Scripting and development skills in Python / Perl with deep comprehension of regular expressions Coordination and communication with other remotely deployed team members Developing documentation with processes and procedures Proposing, implementing automation features in a large enterprise environment At least 3 years of experience with Linux and SQL / ODBC interfaces At least 2 years of experience in app interface development, using REST API’s Hold active Splunk Core Certifications of at least Splunk Architect Minimum of 3 year of experience in developing and tailoring reporting from network security tools.

Must be able to obtain and maintain a US Public Trust clearance Preferred Qualifications : Candidates with these skills will be given preferential consideration.

Experience with Splunk Common Information Model (CIM) and Enterprise Analytic Strong problem-solving abilities with an analytic and qualitative eye for reasoning under pressure.

Self-starter with the ability to independently prioritize and complete multiple tasks with little to no supervision Knowledge of Cloud Services such as AWS, Azure, Office365 Ability to script in one more of the following computer languages Python, Bash, Visual Basic or Powershell Experience in automating Splunk Deployments and orchestration with in a Cloud environment