Cybersecurity Analyst Intermediate w/Splunk

As a Cybersecurity Analyst with a Splunk focus, you will provide cyber security and vulnerability management support for a suite of DOE business applications. You will support DOE’s Corporate Business Systems, used by over 14,000 users to fulfill the agency’s mission to promote energy independence, progress scientific research, and protect the nation through nuclear security.   You will be part of a 60+ person full-service application delivery team supporting DOE on multiple task orders under our Blanket Purchase Agreement (BPA).   

Duties and responsibilities will include, but are not limited to:  

• Gathers and organizes technical information about an organization’s mission goals and needs, IT infrastructure and existing security/IA products.   
• Assists in development and application of security/IA policies, procedures, and standards.   
• Responsibilities include working with the customer to minimize risks and assess and secure applications and databases. 
• Leverage experience in cloud platforms and technologies including cyber security, information assurance, network security, computer information systems, computer science, or management information systems. 
• Identify data patterns, provide metrics, diagnose problems, and provide intelligence for business operations by using tools such as SPLUNK, DBProtect, and Burp-Suite 
• Leverage Security Information and Event Management (SIEM) systems and processes in the delivery of cyber-security services. 
• Develop Splunk dashboards and visualizations to highlight application and database alert conditions
• Establish application and database logging standards in support of government mandates
• Design and customize complex search queries and promoting advance searching, forensics, and analytics. 
• Develop and document configuration standards, policies, and procedures for operating, managing and ensuring the security of a Splunk infrastructure.
• Develop dashboards, data models and visualizations, reports and performance optimization. 
• Developing documentation on new or existing systems.
• Execute and interpret vulnerability scans, and collaborate with system owners to address vulnerabilities 
• Apply diagnostic techniques to identify problems, investigate causes, and recommend solutions. 

Minimum Requirements:  

• Bachelor’s degree in Computer Science, Information Systems, Engineering, Business, or other related discipline with 5+ years of increasingly responsible and relevant experience in defining security requirements. Without a degree at 6-8 years of relevant experience is required.  
• 3.5+ years of hands-on experience with Splunk design and administration
• Understanding of common hacking techniques (e.g., malware, etc.) and effective counter measures. 
• Experience with Oracle and Microsoft SQL Server databases and their security configurations 
• Good team player, able to manage multiple assignments, and adapt to changing client needs 
• Must be able to obtain and maintain a DOE Clearance and successfully pass a thorough Government background screening process requiring the completion of detailed forms and fingerprinting 
• US Citizenship 

Desired Qualifications:  

• Experience with Trustwave DBProtect, Burp Suite
• Certified Splunk Enterprise Administrator
• Demonstrated experience in IT best practices regarding application, enterprise system, and network security
• Experience with Anti-Virus, Intrusion Detection/Protection Systems, Firewalls, Active Directory, Vulnerability Assessment tools and other security tools found in large network environments. 
• Previous Department of Energy experience. 

WHAT GDIT CAN OFFER YOU

• Full-flex work week
• 401K with company match
• Customizable health benefits packages
• Collaborative teams of highly motivated critical thinkers and innovators
• Internal mobility team dedicated to helping you own your career
• Rewards program for high-performing employees

GDIT CAREERS

Opportunity Owned

Discover more at www.gdit.com/careers