Required Skills

• Ability to create queries and alerts that feed into a dashboard for monitoring and analysis of various logs

• Experience with creating Splunk dashboards

• Provide analysis and review of Splunk audit logs to include OS, database, and application logs

• Experience in evaluating query results and reporting results to the customer in report format

• Strong writing skills to create documentation such as SOPs, internal process documents and input into cyber policies

• Ability to coordinate with external projects and customers to ensure audit log ingest

• Understanding of creating ITSI Glass Tables

• Performs all procedures necessary to ensure the safety of information systems assets and to protect systems from intentional or inadvertent access or destruction

• Ability to assess, plan, and enact security measures to help protect an organization from security breaches and attacks on its computer networks and systems.

• Analyzes all relevant cyber security event data and other sources for attack indicators and potential security breaches

• Applies knowledge of Information Assurance Vulnerability Alerts (IAVAs)

• Detects, triages, investigates, responds and reports on all of the monitored networks

• Demonstrates experience with RMF, CNSSI 1253, NIST SP 800-53, and NISPOM

• Demonstrates experience with Security Technical Implementation Guides (STIGs) and Security Content Automation Protocol (SCAP) Compliance Checker (SCC)

• Demonstrated experience with compliance and vulnerability scanning tools (XACTA, RedSeal, Nessus, Splunk, McAfee ePO, and/or other vulnerability scanners)

• Experience with cloud technologies to include Amazon and Azure

• Excellent writing and communication skills

Powered by JazzHR