Lead Cyber Security Engineer

Salary: $100,000 - 140,000 per year Requirements:

• I am looking for candidates with a Bachelor's degree or, in lieu of a degree, at least 4 additional years of experience in the cybersecurity field. You should have a minimum of 10 years of experience in a cyber role, with familiarity in Security Information and Event Management (SIEM) platforms, particularly Splunk. A solid understanding of Linux systems administration, general operating system security practices, TCP/IP networking, and network security concepts is essential. Additionally, knowledge of Certification & Accreditation processes and familiarity with DoD policies and technical security guidance regarding information systems is required. You must possess a DoD Directive 8570.1 IAT Level II certification or be able to obtain it within 6 months. A Splunk certification is a must.

• In this role, I expect you to troubleshoot both new and ongoing data collection issues while resolving system problems that impact stability and usability. You will be tasked with deploying and managing all required Splunk Add-ons for specific data sources, along with producing documentation like body of evidence documents, engineering documents, change management documents, system security plans, and accreditation documents as necessary. You will also deliver a thorough Splunk deployment document that outlines the specifications, deployment strategies, and other architectural considerations for the production environment. It's crucial to maintain a stringent role-based access control solution concerning the collected data, delivering a need-to-know capability. Additionally, you will design and swiftly deploy forwarders with centralized configuration management using the Splunk Deployment Server.

• AWS
• Cloud
• Linux
• Network
• Security
• Splunk
• TCP/IP

More:

Preferred qualifications include experience with Linux, specifically Red Hat and CentOS, as well as familiarity with AWS or other cloud environments. Knowledge of ICS 500-27 for audit collection requirements and services such as Enterprise Security Services, Host Base Security Service, and Enterprise Vulnerability Scanning Service would be advantageous. You should also have the ability to modify feed creation to ingest customer logs in a standardized format to comply with policy requirements. Please note that a current and active TS/SCI with Polygraph security clearance is necessary for this position. The role may require you to remain stationary for about 50% of the time and occasionally move around the office to access files or engage with coworkers, management, and clients through various forms of communication, which may include delivering presentations.

last updated 37 week of 2026