Principal Splunk Analyst (Principal Cyber Security Analyst)

Job Description

MSTS is seeking an experienced candidate for the Principal Splunk Analyst (Principal Cyber Security Analyst). The Principal Splunk Analyst will play a critical role in safeguarding company infrastructure from cyber threats and attacks by delivering innovative solutions which enhance the capabilities of the Cyber Security section to detect and identify threat activity and system intrusions. The position is responsible for a range of Splunk development and configuration activities including system deployment, Splunk application implementation, data onboarding, and other Splunk integrations.

Responsiblities

Key Responsibilities

• Manage the organizations Splunk environment providing fundamental knowledge of the Splunk license manager, indexers, and search leads.

• Lead a range of Splunk development and configuration activities including system deployment, Splunk app implementation, data onboarding, and other Splunk integrations.

• Mature and maintain premium Splunk applications to include Enterprise Security, SOAR (Security Orchestration, Automation, and Response) , International Technology Security and Innovation (ITSI) , as well as research new applications to modernize deployment.

• Develop SOAR playbooks to minimize security incident response time and develop advanced techniques to identify and mitigate vulnerabilities.

• Collaboratively design and implement custom Splunk solutions which satisfy project requirements.

• Use established standards, practices, and procedures as well as an increasing technical knowledge to solve problems and complete projects.

• Review current Cyber Security threat information and assist the Threat Hunter team with mitigating vulnerabilities identified.

• Collaborate with other outside Cyber Security interests such as Counterintelligence, other DOE sites, US CERT, and law enforcement.

• Assist with data calls, Federal Information Security Modernization Act (FISMA) reporting, compliance scanning and reporting, continuous monitoring, and compiling reports for auditors.

• Perform other duties assigned by Management.

Qualifications

• Bachelor’s degree or equivalent training and experience in a computer-related field and at least 8 years of related experience.

• Preferred Certifications (please upload certificates when applying):

• Splunk Enterprise Certified Architect

• Splunk Enterprise Security Certified Administrator

• Splunk SOAR Certified Automation Developer

• Splunk IT Service Intelligence Certified Administrator

• Ability to deploy, configure, and manage large-scale clustered Splunk environments via the command-line interface.

• Capability to onboard diverse data sources using various input techniques and centralized logging/filtering methods like syslog.

• Develop and maintain comprehensive health monitoring for large Splunk deployments and their associated data sources.

• Have a strong IT background encompassing Linux administration, networking fundamentals, and core cybersecurity principles protocols, and standards.

• Proficiency in DevOps practices and tools, including Git, Jenkins, Ansible, Jira, and configuration management within production environments.

• Solid software engineering foundation with experience in modern programming (Python, Bash, or PowerShell), design patterns, TDD, debugging, and Agile methodologies.

• Capability to develop SOAR playbooks and Splunk ITSI solutions, including service visualizations and network anomaly analysis, while adhering to security compliance frameworks and best practices.

• Can maintain strict confidentiality.

• Ability to communicate effectively in English, both verbally and in writing, sufficient to communicate with co-workers, customers, write clear and concise reports, gather information, and collect information.

• Capable of using multiple electronic devices including standard office machines, cellular phones, and security appliances.

• General understanding of cybersecurity controls used to mitigate vulnerabilities.

• The work location will be at the Losee Road facility in North Las Vegas, Nevada.

• Work schedule will be 4/10's Monday through Thursday (subject to change).

• Pre-placement physical examination, which includes a drug screen, is required. MSTS maintains a substance abuse policy that includes random drug testing.

• Must possess a valid driver's license.

MSTS is required by DOE directive to conduct a pre-employment drug test and background review that includes checks of personal references, credit, law enforcement records, and employment/education verifications. Applicants offered employment with MSTS are also subject to a federal background investigation to meet the requirements for access to classified information or matter if the duties of the position require a DOE security clearance. Substance abuse or illegal drug use, falsification of information, criminal activity, serious misconduct or other indicators of untrustworthiness can cause a clearance to be denied or terminated by DOE, resulting in the inability to perform the duties assigned and subsequent termination of employment. In addition, Applicants for employment must be able to obtain and maintain a DOE Q-level security clearance, which requires U.S. citizenship, at least 18 years of age. Reference DOE Order 472.2, “Personnel Security”. If you hold more than one citizenship (i.e., of the U.S. and another country), your ability to obtain a security clearance may be impacted.

Department of Energy Q Clearance (position will be cleared to this level). Reviews and tests for the absence of any illegal drug as defined in 10 CFR Part 707.4, “Workplace Substance Abuse Programs at DOE Sites,” will be conducted. Applicant selected will be subject to a Federal background investigation, required to participate in subsequent reinvestigations, and must meet the eligibility requirements for access to classified matter. Successful completion of a counterintelligence evaluation, which may include a counterintelligence-scope polygraph examination, may also be required. Reference 10 CFR Part 709, “Counterintelligence Evaluation Program.”

MSTS is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, national origin, disability, veteran status or other characteristics protected by law. MSTS is a background screening, drug-free workplace.

Annual salary range for this position is: $118,560.00 - $180,814.40.

Starting salary is determined based on the position market value, the individual candidate education and experience and internal equity.

About Us

Mission Support and Test Services, LLC (MSTS) manages and operates the Nevada National Security Sites (NNSS) for the U.S. National Nuclear Security Administration (NNSA), a semi-autonomous agency within the U.S. Department of Energy (DOE). The NNSS is an enterprise of special-purpose, multi-mission, high-hazard experimentation facilities delivering technical and service solutions in partnership with the National Laboratories. Our collaborative work supports the government’s most important national security missions. (See NNSS.gov for our unique capabilities.) Our 3,000+ professional, craft, and support employees are called upon to innovate, collaborate, and deliver on some of the more difficult nuclear security challenges facing the world today.

• MSTS offers our full-time employees highly competitive salaries and benefits packages including medical, dental, and vision; both a pension and a 401k; paid time off and 96 hours of paid holidays; relocation (if located more than 75 miles from work location); tuition assistance and reimbursement; and more.

• MSTS is a limited liability company consisting of Honeywell Aerospace, Amentum, and HII Nuclear Inc.