Cybersecurity Engineer

Amyx, Inc. is seeking a Lead Cybersecurity Engineer to support specialized cybersecurity efforts and routine project tasks in Columbus, OH (onsite) or Richmond, VA. The position emphasizes security engineering support and Splunk ES SIEM work, including dashboard development and administration.

Key Responsibilities

• Perform integration of electronic processes or methodologies to resolve total system or technology problems related to cybersecurity requirements.
• Analyze information security requirements and apply analytical, systematic approaches to problems involving workflow, organization, and planning.
• Provide security engineering support across planning, design, development, testing, demonstration, and integration of information systems.
• Analyze threat information collected from logs, Intrusion Detection Systems (IDS), intelligence reports, vendor sites, and other sources.
• Create customized SIEM dashboards using Splunk ES to elevate high threat items to incident responders.
• Maintain administration knowledge of Splunk ES and the related backend database infrastructure, including upgrades and daily maintenance.
• Provide analysis and recommendations aligned with CERT Incident Handler (IH) and site Information Assurance Manager (IAM) roles.
• Develop ES rules, reports, dashboards, data monitors, active channels, trends, and use cases to identify threats and improve data mining across DLA.
• Research, plan, install, configure, troubleshoot, maintain, and back up components of the DLA Splunk Enterprise Log Management (ELM) architecture.

Required Qualifications

• 7 years of relevant IT experience.
• DoD Secret Clearance.
• Must possess IT-I Critical Sensitive security clearance or Tier 5 (T5).
• Primary DCWF Work Role 521: Cyber Defense Infrastructure Support (Proficiency Level: Intermediate).
• Secondary DCWF Work Role 451: System Administrator (Proficiency Level: Intermediate).
• Computing environment experience with Linux+ and Splunk Administrator.
• Experience creating custom Splunk dashboards and reports using threat data.
• Experience integrating and sustaining Splunk Core and Splunk Enterprise Security (ES).

Tools and Technology

• Microsoft Excel, Microsoft Access, and the Microsoft Office suite (including Word, PowerPoint, and SharePoint)
• Linux+
• Splunk, Splunk ES (Splunk Enterprise Security), and Splunk ELM (Enterprise Log Management)
• Cribl
• Security Information and Event Management (SIEM)

Compensation

Salary: USD 135,000 - 145,000 per year.

Benefits

• Medical, Dental, and Vision Plans (PPO & HSA options available)
• Flexible Spending Accounts (Health Care & Dependent Care FSA)
• Health Savings Account (HSA)
• 401(k) with matching contributions
• Roth
• Qualified Transportation Expense with matching contributions
• Short Term Disability and Long Term Disability
• Life and Accidental Death & Dismemberment
• Basic & Voluntary Life Insurance
• Wellness Program
• PTO and 11 Holidays
• Professional Development Reimbursement

Physical Demands

• Ability to sit at a workstation for extended periods and use hands to handle or feel objects, tools, or controls.
• Ability to reach with hands and arms; ability to talk and hear.
• Ability to work on desktop or laptop computer for extended periods, including reading, reviewing/analyzing information, and providing written recommendations, summaries, and/or reports.
• Ability to effectively communicate verbally and in writing.
• May be required to occasionally lift and/or move moderate amounts of weight, typically less than 20 pounds.
• Regular and predictable attendance is essential.