Senior Cyber Security Engineer (Splunk) ZT
Job Description
Platinum Technologies is seeking a Senior Cyber Security Engineer (Splunk) to support a Zero Trust initiative at USSOCOM (MacDill AFB, Tampa, FL). This onsite role provides Tier 3/4 engineering and technical support, partnering with customer stakeholders and ISSOs to drive UEBA and SOAR implementation. An active TS/SCI clearance is required.
You will build and sustain key security operations capabilities, including UEBA, SOAR, and the documentation required for the RMF and ATO lifecycle. The position emphasizes hands-on engineering, reliable integration of Zero Trust efforts, and continuous improvement of processes and product quality.
Responsibilities
- Collaborate with the customer and other support contracts to ensure timely and reliable integration of Zero Trust efforts.
- Work with other ISSOs and stakeholders to support RMF process activities.
- Create and manage RMF artifacts and support the full ATO lifecycle.
- Coordinate with cybersecurity SMEs to identify requirements and process improvements.
- Assist cybersecurity assessors as required.
- Interpret and apply DISA STIG requirements.
- Provide hands-on execution of assessments involving enclave and network infrastructure devices.
- Ensure quality and timeliness by advising, troubleshooting issues, resolving problems to meet objectives, and providing periodic performance reports.
- Contribute to best practices and procedures, and develop or refine processes to improve quality and productivity.
Requirements
- Active TS/SCI clearance.
- Bachelor’s degree or 4+ additional years of cybersecurity experience in lieu of a degree.
- 10+ years of experience in an enterprise and/or cybersecurity-focused environment.
- Experience with Splunk administration and engineering.
- Experience with Splunk Enterprise Security (ES) operations and configurations.
- Experience with Splunk telemetry integration, workflow engineering, and tuning.
- Proficiency with Unix and Windows environments.
- DoD 8570 IAT Level III / DoW 8140 (511) Advanced certification (e.g., CISSP).
Technologies
- Splunk, Splunk Enterprise Security (ES)
- Unix, Windows, Bash
- Python, Java, Perl, .NET
- DISA STIG, RMF, ATO
- DoW
Preferred Qualifications
- Splunk certifications including any of: Splunk Certified Cybersecurity Defense Architect, Splunk Enterprise Certified Architect, Splunk Certified Cybersecurity Defense Engineer, Splunk Core Certified Advanced Power User, Splunk Core Certified Consultant.
- Experience with scripting or programming languages (Bash, Python, Java, Perl, .NET).
- Familiarity with developing and deploying operational and security use cases within Splunk.
- Familiarity with DoW & NSA Zero Trust Guidance.
- Familiarity with DoW RMF ATO process and answering controls.
- Familiarity with USSOCOM SOFNET.
Location and Logistics
Tampa, FL (onsite) at MacDill AFB. Salary range: USD 140,000 - 155,000 per year.
Physical Requirements
- Must be able to remain in a stationary position 50% of the time.
- Occasionally move about inside the office to access file cabinets or office machinery, and to communicate with coworkers, management, and customers via email, phone, or virtual communication, which may involve delivering presentations.