Cybersecurity Engineer 4 – Splunk SIEM

This role is part of a proposal submission. All offers of employment are conditional and subject to the awarding of the contract. The company reserves the right to modify, delay, or cancel the recruitment process based on the outcome of the award.

Cybersecurity Engineer 4 – Splunk SIEM

· Location: Onsite – Columbus, OH or Richmond, VA Defense Logistics Agency (DLA)

· Job Type: W-2

· Shift: Monday–Friday, standard business hours between 6:00 a.m. and 6:00 p.m. local time

· Pay Range: Up to $140,000 annually

· Security Clearance: Active Top Secret (TS) required

· Travel Requirements: Approximately six trips annually, four days per trip, between Washington, DC, Columbus, OH, and Richmond, VA.

Ryan Consulting Group, Inc. is seeking a Cybersecurity Engineer 4 – Splunk SIEM to provide cybersecurity engineering, administration, and operational support for the Defense Logistics Agency (DLA). The role is responsible for maintaining Splunk Core and Splunk Enterprise Security (ES) infrastructure, developing customized security dashboards and correlation searches, and supporting enterprise security monitoring and incident response operations.

Key responsibilities include:

· Administer, maintain, and support Splunk Core and Splunk Enterprise Security (ES) infrastructure.

· Develop and customize Splunk ES correlation searches, security rules, dashboards, reports, and data monitors to identify potential threats and support incident response.

· Analyze security logs, intrusion detection system (IDS) data, threat intelligence reports, vendor information, and other security data sources.

· Maintain Splunk ES backend infrastructure, including upgrades, troubleshooting, daily maintenance, and operational support.

· Research, plan, install, configure, troubleshoot, maintain, and back up components of the DLA Splunk Enterprise Log Management (ELM) architecture.

· Develop security monitoring use cases, active channels, and trend analysis capabilities to improve threat identification and data mining.

· Provide security analysis and recommendations to support Computer Emergency Response Team (CERT) Incident Handlers and Information Assurance Managers (IAM).

· Support cybersecurity engineering activities involving the planning, design, development, testing, demonstration, and integration of information systems.

· Apply analytical and systematic approaches to resolving cybersecurity-related technical and operational challenges.