Splunk/SIEM SME

Date Posted:

2024-10-29

Country:

United States of America

Location:

FL807: 640 Roberts Ave, Pensacola FL 640 Roberts Avenue Corry Station, Pensacola, FL, 32511 USA

Position Role Type:

Hybrid

You have been redirected to RTX’s career page as we have recently transitioned from RTX to become a standalone company, which provides us with greater autonomy and opportunities for growth. As a prospective employee of Nightwing, you’ll have the chance to contribute to our continued success and shape the future of our cybersecurity, intelligence, and services offerings.

Nightwing provides technically advanced full-spectrum cyber, data operations, systems integration and intelligence mission support services to meet our customers’ most demanding challenges. Our capabilities include cyber space operations, cyber defense and resiliency, vulnerability research, ubiquitous technical surveillance, data intelligence, lifecycle mission enablement, and software modernization. Nightwing brings disruptive technologies, agility, and competitive offerings to customers in the intelligence community, defense, civil, and commercial markets.

Nightwing is seeking a Senior Information Security Engineer to support the design, development, and deployment of advanced cybersecurity capabilities. This candidate will conduct the management, administration, troubleshooting and testing of all Splunk components, software, hardware, licensing, and all other aspects of the information system. Additionally, they will perform Operations and Maintenance (O&M) of the system. A critical aspect of the position will be ensuring the logging of mission and organizational data against unauthorized disclosure, accidental or intentional loss of data, or unauthorized modification. This NightWing position supports a U.S. Government customer on a large mission critical, development and sustainment program to design, build, deliver, and operate a network operations environment including introducing new cyber capabilities to address emerging threats.

Responsibilities include:

Applies current analytical and logical thinking to the design, architecture, development, evaluation, testing, and integration of computer systems, appliances, and networks involving the architecture and implementation of the Splunk product.

Applies attention to detail for out of the box thinking with a problem-solving mindset, be able to work under pressure, and be able to deliver on tight delivery schedules are recommended soft skills.

Displaying superb understanding and be knowledgeable with a multitude of technologies to include; firewalls, web application firewalls, VPNs, DNS, Data Loss Prevention, IDS/IPS, and proxies, to name a few.

Develops security systems for any manual or automated systems environments.

Ensuring the logging of mission and organizational data against unauthorized disclosure, accidental or intentional loss of data, or unauthorized modification.

 Administering the management of all Splunk components, software, hardware, licensing, and all other aspects of the information system, as well as, Operations and Maintenance (O&M) of the system

Providing Splunk administration, management, troubleshooting, and testing

Supporting Projects and Project management personnel throughout the full software development lifecycle

Managing technology roadmaps with each product and propose briefs and reports to elaborate on recommended actions based on best practices

Working with a variety of different tools and appliances, security problems, and troubleshooting various complex issues.

Performing full product testing to the length of the products capabilities as required by the customer and the program

Developing capabilities according to customer requirements and NIST, DHS, and Government guidelines and regulations

Required Skills:

An active TS/SCI is required

Must have active DHS suitability

6+ years of directly relevant experience

Experience and/or familiarity with the following network protection devices: Firewalls, intrusion detection and prevention systems (IDS/IPS), log analysis, malware analysis, network traffic flow and packet analysis

Experience managing and administering Splunk Enterprise Security, Splunk Cloud, and Splunk in the Cloud environments.

Support Projects and Project management personnel throughout the full software development lifecycle

Manage technology roadmaps with each product and propose briefs and reports to elaborate on recommended actions based on best practices

Perform full product testing to the length of the products capabilities as required by the customer and the program

Develop capabilities according to customer requirements and NIST, DHS, and Government guidelines and regulations

Desired Skills:

Strong troubleshooting and networking skills

In depth knowledge of Windows, and Linux operating systems

Understanding of Cloud technologies, methodologies, and processes such as AWS or Azure.

Familiarity with one or more of the following: RSA Security Analytics (NetWitness), Symantec Bluecoat, CyberArk, ForeScout CounterAct, McAfee ePO, FireEye, Cisco FirePower (SourceFire), RedSeal, SecureSphere Imperva, Tenable Nessus, Splunk, Cloud technologies, Splunk Cloud, DevSecOps processes

Understanding of Project Management processes to include SAFe and Agile, SDLC, DevSecOps.

Required Education:

BS Computer Science, Computer Engineering, Computer Information Systems, OR Computer Systems Engineering.  Two years of related work experience may be substituted for each year of degree level education.

Desired Certifications:

Splunk Administrator, Splunk Enterprise Security, Splunk Architect, Splunk Consultation, Splunk Cloud, etc.

Previously part of a leading Fortune 100 company and headquartered in Dulles, VA; Nightwing became independent in 2024 but continues to support the nation’s most mission impactful initiatives.

When we formed Nightwing, we brought a deep set of credentials and an unfaltering commitment to the mission. For over four decades, our team has been providing some of the world’s most technically advanced full-spectrum cyber, data operations, systems integration and intelligence support services to the U.S. government on its most important missions.

At Nightwing, we value collaboration and teamwork. You’ll have the opportunity to work alongside talented individuals who are passionate about what they do. Together, we’ll leverage our collective expertise to drive innovation, solve complex problems, and deliver exceptional results for our clients.

Thank you for considering joining us as we embark on this new journey and shape the future of cybersecurity and intelligence together as part of the Nightwing team.

The salary range for this role is 77,000 USD - 163,000 USD. The salary range provided is a good faith estimate representative of all experience levels. RTX considers several factors when extending an offer, including but not limited to, the role, function and associated responsibilities, a candidate’s work experience, location, education/training, and key skills.

Hired applicants may be eligible for benefits, including but not limited to, medical, dental, vision, life insurance, short-term disability, long-term disability, 401(k) match, flexible spending accounts, flexible work schedules, employee assistance program, Employee Scholar Program, parental leave, paid time off, and holidays. Specific benefits are dependent upon the specific business unit as well as whether or not the position is covered by a collective-bargaining agreement.

Hired applicants may be eligible for annual short-term and/or long-term incentive compensation programs depending on the level of the position and whether or not it is covered by a collective-bargaining agreement. Payments under these annual programs are not guaranteed and are dependent upon a variety of factors including, but not limited to, individual performance, business unit performance, and/or the company’s performance.

This role is a U.S.-based role. If the successful candidate resides in a U.S. territory, the appropriate pay structure and benefits will apply.

RTX anticipates the application window closing approximately 40 days from the date the notice was posted. However, factors such as candidate flow and business necessity may require RTX to shorten or extend the application window.

RTX is An Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age or any other federally protected class.

Privacy Policy and Terms:

Click on this link to read the Policy and Terms