Cybersecurity Engineer (Splunk)

The JETS Program provides the full range of IT services, technical and management expertise that support applications, software, hardware, infrastructure, and systems, across the DLA IT Enterprise. Support is provided for information technology solutions, technical support, maintenance, and sustainment; operations support; application development, maintenance, and technical support; and lifecycle management. Additionally, the program also supports administrative program management support for IT program offices and DLA Information Operations (J6) Office.   The program provides support technology services across the DLA Information Operations Enterprise, the DLA Program Executive Offices (PEO), and all other technology services currently supported through DLA Contracting Services Office (DCSO) acquisitions.

If you are looking for a challenging cybersecurity opportunity that allows you to develop and learn in a stable and growing organization…come joins us as a Cybersecurity Engineer at Horizon.  Horizon Industries Limited (Horizon) is a dynamic IT and Management Consulting firm based in the Washington, DC area and we are currently seeking a Cybersecurity Engineer for a full-time position supporting the Defense Logistics Agency (DLA) onsite in Columbus, OH. or Richmond, VA.

• 7 years relevant IT experience
• DoD 8140 - Primary DCWF Work Role 521 Proficiency Level: Intermediate certification
• Secondary DCWF Work Role 451 : Proficiency Level: Intermediate Certification
• Splunk Administrator
• Linux+
• Active Top Secret Clearance

• CERT or SOC Experience : Knowledge of or hands-on experience with Incident Response and Incident Handling processes.
• SIEM (Security Information and Event Management) : Experience with SIEM tools for monitoring, analysis, and threat detection.
• SOAR (Security Orchestration, Automation, and Response) : Familiarity with automation capabilities and ability to identify new opportunities for process automation.
• UAM (User Activity Monitoring) : Understanding of user behavior analysis and activity monitoring solutions.
• Linux : Working knowledge of Linux environments. 
• Cribl : Experience using Cribl for data routing, observability pipelines, or log management.

• Perform a variety of routine project tasks applied to specialized information assurance problems
• Execute integration of electronic processes or methodologies to resolve total system problems, or technology problems as they relate to IA requirements
• Conduct security assessments and security consulting services
• Analyze information security requirements
• Apply analytical and systematic approaches in the resolution of problems of work flow, organization, and planning
• Provides security engineering support for planning, design, development, testing, demonstration, integration of information systems
• Analyze threat information gathered from logs, Intrusion Detection Systems (IDS), intelligence reports, vendor sites, and a variety of other sources

• Seven (7) years’ relevant IT experience
• Experience creating custom dashboards and reports in Splunk using threat data. 
• Experience in the integration and sustainment of Splunk Core and Splunk Enterprise Security (ES)
• Individuals with experience with enterprise deployment of Splunk may be eligible for alternate work locations (in commuting proximity to DLA locations)

• Must possess the DoD 8140 - Primary DCWF Work Role 521 Proficiency Level: Intermediate (Advanced included below)
  • GMON
  • GRID
  • CEH
  • CISSP-ISSAP
  • CISSP-ISSEP
  • Cloud+
  • CySA+
  • GCIA
  • GICSP
  • GSEC
  • PenTest+
  • Security+
  • SSCP

• Secondary DCWF Work Role 451 : Proficiency Level: Intermediate (Advanced included below)
  • SecurityX / CASP+
  • CCNP Security
  • CCSP
  • Cloud+
  • FITSP-O
  • GFACT
  • GICSP
  • GSEC
  • Security+
  • SSCP

• Computing Environment Requirements with required experience:
• Linux+
• Splunk Administrator
• Candidates must possess active Top Secret clearance.
• Preferred Experience:
• DOD IA experience