Senior Cybersecurity Engineer

Senior Cybersecurity Engineer

This is contract to hire role. Does not support visa holders

The Senior Cybersecurity Engineer position is core to the operation and expansion of our security analytics program. The Engineer will be responsible for developing creative solutions using Splunk and other tools. This position is heavily focused on ensuring consistent data ingestion, data integrity and data normalization to optimize performance of the ingestion pipeline.

Responsibilities:

• Architect and implement data ingestion pipelines using a combination of Splunk and third-party vendor technologies.
• Work with system, application, and vendor stakeholders to normalize data for optimal search performance.
• Develop standard taxonomies for application onboarding.
• Develop a strong, structured change management process around log acquisition and log updates.
• Create, document, and implement use cases for Enterprise Security.
• Analyze logs during security event investigations.
• Environment monitoring for purposes of capacity planning at CareFirst.
• Identification and escalation of environment issues impacting service level agreements.
• Work with Splunks Cloud engineering team to support expansion of environment including data retention.
• Coordination with other CareFirst groups in providing open communication specific to all environment activities, including testing, upgrades, scheduled down time.

Requirements:

• Bachelor of Science in Computer Science, or equivalent knowledge/experience
• 3-5 year of experiencing in a progressive Splunk engineering or administration role.

Technical Requirements:

• Experience with Splunk Enterprise Security.
• Experience with logs, parsing and use case development from AWS, Azure and GCP.
• Experience in Syslog, Splunk Event collection (HEC).
• Experience in third-party pipeline tools (for example CRIBL).
• Experience ingesting logs from DB Connect app.
• Experience creating Alerts, Dashboards and reports in Splunk Tool.
• Experience in Log parsing, lookups, calculated fields extractions using regular expression (regex).