Cribl Analytics Engineer

Zachary Piper Solutions - Washington, DC

Full-time - Mid Level

Washington, DC

Professional, Scientific, and Technical Services

About the position

Zachary Piper Solutions is seeking a Cribl Engineer to support a defense contract, requiring in-person presence at the client site located in Reston, DC or College Park. This mid-level engineering position is crucial for developing innovative solutions that ensure secure and reliable operations of enterprise computer systems. The engineer will be responsible for implementing enterprise network cyber defense capabilities aimed at preventing sophisticated cyber threats. A strong understanding of layered defense and zero trust technologies is essential for this role. As a Splunk and Cribl engineer, the individual will work to prevent adversary network threats, identify advanced attack vectors, and thwart methods of exploitation. The role involves providing expertise in the engineering design, development, direction, and implementation of enterprise network cyber defense capabilities. The engineer will apply familiarity with various cyber defense capabilities, including web content filters, email security capabilities, Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), Host Based Security Systems (HBSS), Security Incident and Event Management (SIEM) tools, Domain Name System (DNS) security practices, advanced log analysis, network monitoring, network flow analysis, packet capture analysis, network proxies, firewalls, anti-virus capabilities, and command line operations in Linux or UNIX. The position also requires knowledge of access control lists and the ability to implement these technologies effectively to enhance the security posture of the organization.

Responsibilities

• Develop innovative solutions for secure and reliable operations of enterprise computer systems.
• Implement enterprise network cyber defense capabilities to prevent sophisticated cyber threats.
• Understand and apply layered defense and zero trust technologies.
• Prevent adversary network threats and identify advanced attack vectors.
• Provide expertise in the engineering design, development, direction, and implementation of cyber defense capabilities.
• Utilize and configure various cyber defense tools and technologies, including IDS, IPS, and SIEM tools.
• Conduct advanced log analysis and network monitoring to enhance security measures.

Requirements

• 3+ years of experience with Cribl and Splunk systems administration.
• Experience with Windows and Linux, including installing, configuring, or maintaining server operating systems and applications.
• Experience working with STIGs, SCAP, and cybersecurity best practices.
• Active TS/SCI clearance; willingness to take a polygraph exam.
• HS diploma or GED and 7+ years of experience in cyber engineering projects, or an Associate's degree with 5+ years, or a Bachelor's degree with 3+ years, or a Master's degree with 1+ year of experience in cyber engineering projects.
• DoD 8570.01-M Information Assurance Technician (IAT) Level II Certification, including Security+ CE, CCNA-Security, GSEC, SSCP, CySA+, GICSP, or CND Certification.
• DoD 8570.01-M Cyber Security Service Provider - Infrastructure Support Certification, including CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND Certification.

Nice-to-haves

• Experience with VMWare.
• Experience with big data analytics, machine learning, artificial intelligence, or anomaly detection.
• Experience scripting in PowerShell and BASH command line interfaces or in Python or Perl scripting languages.
• Experience in a consulting or client-facing environment.
• Ability to automate security configurations of Linux and Windows systems and recommend remediations for non-compliant security controls.
• Excellent verbal and written communication skills, including the ability to present complex ideas to clients and internal staff.
• Strong problem-solving skills.