Cyber Analytics Engineer (CLEARANCE REQUIRED) NEW

$125,000 - $140,000/Yr

Zachary Piper Solutions - Washington, DC

Full-time

Washington, DC

Professional, Scientific, and Technical Services

About the position

Zachary Piper Solutions is seeking a strong Cyber Analytics Engineer to join a long-term federal program, supporting the Defense Intelligence Agency (DIA). This role is fully onsite, requiring five days a week presence in either College Park, Maryland, Reston, Virginia, or Joint Base Anacostia-Bolling. The Cyber Analytics Engineer will be responsible for developing and implementing advanced cybersecurity solutions using Cribl and Splunk to protect enterprise networks from sophisticated cyber threats. This position involves leading or collaborating within small teams to ensure secure and reliable operations, making it essential for candidates to have a proactive approach to cybersecurity challenges. The Cyber Analytics Engineer will craft innovative solutions to ensure the secure and dependable operation of enterprise computer systems. This includes deploying enterprise network cyber defense mechanisms to thwart sophisticated cyber threats. The role requires leveraging, configuring, and enhancing Cribl and Splunk environments for improved monitoring, analysis, and response to security events. Additionally, the engineer will conduct advanced log analysis, network flow analysis, and packet capture analysis to detect and counter potential threats. Employing security best practices and technologies, including IDS/IPS, web content filters, DNS security, and firewalls, is crucial to uphold a robust security stance. Candidates must possess an active TS/SCI clearance and a willingness to take a polygraph exam, as these are mandatory for the role. The position offers a competitive salary range of $125,000 - $140,000, depending on experience, and includes full benefits such as Cigna Medical, Dental, Vision, and 401K.

Responsibilities

• Craft innovative solutions to ensure secure and dependable operations of enterprise computer systems.
• Deploy enterprise network cyber defense mechanisms to thwart sophisticated cyber threats.
• Leverage, configure, and enhance Cribl and Splunk environments for improved monitoring, analysis, and response to security events.
• Conduct advanced log analysis, network flow analysis, and packet capture analysis to detect and counter potential threats.
• Employ security best practices and technologies, including IDS/IPS, web content filters, DNS security, and firewalls, to uphold a robust security stance.

Requirements

• 3+ years of experience in Cribl and Splunk systems administration, with hands-on experience managing, configuring, and maintaining these platforms.
• Expertise with both Windows and Linux operating systems, including installation, configuration, and maintenance.
• Experience working with STIGs, SCAP, and adhering to cybersecurity best practices.
• Demonstrated experience in conducting or supporting cyber engineering projects, with a grasp of network and system security principles, including IDS/IPS, web content filters, DNS security, and firewalls.
• Programming skills in PowerShell, BASH, Python, or Perl for automating security configurations and remediation.
• Exceptional problem-solving capabilities and outstanding verbal and written communication skills, especially in explaining complex technical concepts to clients and internal teams.

Nice-to-haves

• Experience with Fluentd, Apache Kafka, Kafka Streams, Graylog, Vector, Syslog-ng, elastic, logstash, and Splunk Data Stream Processor.
• Certifications such as DoD 8570.01-M Cyber Security Service Provider - Infrastructure Support Certification, CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, CND Certification, zero trust, DoD 8570.01-M Information Assurance Technician (IAT) Level II Certification, Security+ CE, CCNA-Security, GSEC.

Benefits

• Cigna Medical
• Dental
• Vision
• 401K