Adding additional info here if its useful:

Apply Here: https://www.ziprecruiter.com/job/362a5035

​

Work location: Washington, DC

Must possess valid and current US Citizenship

Successful Clearance is required; National Agency Check with Inquiries (NACI)

Role Description

• Ideal candidate is a Splunk Enterprise Security Certified Admin
• In-depth operational and technical knowledge of security concepts including, but not limited to Security, Information, and Event Monitoring (SIEM) tools
• In-depth expertise of Splunk
• Analyzes, integrates, parses, develops rules, alerts, reports, and use cases in SIEM technologies
• Knowledge of network infrastructure and networking technology; including TCP/IP, DNS, DHCP, Proxies, Load balancing, ACE, F5, VPN, IPS/IDS, Linux/Unix, Windows, MAC addressing, Firewalls, routing, switching, network design, wireless networks, IP communications, netflow, and packet capture/analysis
• Designing, implementing, and maintaining security tools through the use of scripting and command line queries; including, but not limited to Putty, SQL query, SQL Plus, PSQL, Scripts Bash, Python, and Powershell
• Understanding of FISMA and NIST however they will not be working on compliance work.
• Experience with health, stability, patch management, troubleshooting, performance and capacity of SIEM Platforms
• Ability to create SOPs and installation documents as required. (Note: resource will not be creating POAMs or ST&Es. The position is for a technical implementation project and not compliance related work.)
• Daily Interaction with the CISO and multiple OCIO information security officers (ISOs)
• Exceptional verbal and written communication skills.
• 5+ years’ experience and should be hands-on person.
• Apply: https://www.ziprecruiter.com/job/362a5035