Cybersecurity Engineer (Splunk)

Cybersecurity Engineer (Splunk) Salary Range: Clearance: Active Top Secret clearance Location: Columbus, OH or Richmond, VA Who We Are Horizon Industries Limited (Horizon) is a dynamic IT and Management Consulting firm based in the Washington, DC area. Founded in 1996, Horizon Industries Limited (Horizon) has evolved into a company of highly qualified professionals that provides full-cycle IT Consultant and Management support in both the private and public sectors. Horizon’s culture is based on our core values, and we PRIDE ourselves on a diverse, employee, and family-centric approach. Who we are looking for: If you are looking for a challenging cybersecurity opportunity that allows you to develop and learn in a stable and growing organization…come join us as a Cybersecurity Engineer at Horizon. Horizon Industries Limited (Horizon) is a dynamic IT and Management Consulting firm based in the Washington, DC area, and we are currently seeking a Cybersecurity Engineer for a full-time position supporting the Defense Logistics Agency (DLA) on-site in Columbus, OH, or Richmond, VA. Performs a variety of routine project tasks applied to specialized cybersecurity problems. Tasks involve integration of electronic processes or methodologies to resolve total system problems, or technology problems as they relate to cybersecurity requirements. Analyzes information security requirements. Applies analytical and systematic approaches in the resolution of problems of workflow, organization, and planning. Provides security engineering support for planning, design, development, testing, demonstration, and integration of information systems. Analyzes threat information gathered from logs, Intrusion Detection Systems (IDS), intelligence reports, vendor sites, and a variety of other sources. Creates customized dashboards using the Security Information and Event Management (SIEM) tool Splunk ES to elevate high-threat items to incident responders. Administration knowledge of the Splunk ES and backend database infrastructure related to upgrades and daily maintenance is essential. Provide analysis and make recommendations in line with the roles of CERT Incident Handlers (IH) and site Information Assurance Managers (IAM). Develop ES rules, reports, dashboards, data monitors, active channels, trends, and use cases to identify threats and optimize data mining across DLA. Will research, plan, install, configure, troubleshoot, maintain, and back up all components in the DLA Splunk Enterprise Log Management (ELM) architecture. Minimum Experience: - Seven (7) years of relevant IT experience - Primary DCWF Work Role 521: Cyber Defense Infrastructure Support Proficiency Level: Intermediate (any of the following): Security+, CySA+, CEH, SSCP, GSEC, GMON, Cloud+, or PenTest+. - Secondary DCWF Work Role 451: System Administrator Proficiency Level: Intermediate(any of the following): Security+, Cloud+, GSEC, GICSP, or SSCP. - Computing Environment: Linux+, Splunk Administrator - Experience creating custom dashboards and reports in Splunk using threat data. - Experience in the integration and sustainment of Splunk Core and Splunk Enterprise Security (ES). Why you will love working with us/ Perks - A comprehensive benefits package including healthcare (medical, dental, vision and disability) - a 401k program where you are 100% vested from day one with an employer match after 90 days. - an Educational Assistance program. - a Student Loan Repayment Program - Gym Reimbursement Program. - Paid Time off - Dynamics, passionate, multi-disciplinary team of creative minds to work with and many more. Horizon is an Equal Employment Opportunity employer, and it is our policy to consider all applicants for employment. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin. EOE/Vet/Disabled