About the job
Delaware Nation Industries (DNI) is a leading prime contractor dedicated to providing exceptional manpower and IT Operations and Maintenance support within a Federal Agency. We are actively seeking a skilled Cyber Security Engineer to join our team in supporting an agency that serves over 4,000 users. This position is critical in maintaining strict adherence to established processes and policy governance within a defined cybersecurity framework. The chosen candidate will engage with a variety of cybersecurity tools and processes, ensuring operational integrity and security through a comprehensive testing framework.
In this role, you will offer your subject matter expertise to both agency end-users and staff, contributing to a secure and efficient enterprise-level work environment.
Key Responsibilities:
- Facilitate the implementation of a robust Splunk infrastructure to efficiently ingest, analyze, and visualize machine-generated data while deploying, configuring, and maintaining Splunk Enterprise components such as indexers, Search Heads, and Forwarders.
- Develop dashboards, alerts, and reports to enhance threat detection capabilities.
- Conduct continuous server patching and maintenance to ensure compliance with security standards.
- Guarantee the operational status of Red Hat Enterprise Linux servers, ensuring accurate reporting.
- Oversee the organization’s security posture through the deployment of security policies (Microsoft Intune), proactive threat monitoring and response (Microsoft Defender/Sentinel), and data governance practices including Data Loss Prevention (Microsoft Purview).
- Troubleshoot application and server issues while responding to federal customer service requests.
- Utilize both software and hardware tools to identify and diagnose complex performance-related problems.
- Support incident response efforts by pinpointing vulnerabilities associated with emerging threats and zero-day exploits.
- Collaborate with PMO and vendor support service groups to facilitate Cyberspace Task Order efforts and ensure appropriate escalation during outages or system degradation.
- Create and update necessary documentation to support the Splunk team’s requirements and deliverables.
- Engage in weekly Splunk engineering meetings to support agency mitigation, compliance, assessment efforts, and initiatives.
- Monitor and track vulnerabilities, End-of-Life items, and priority action items.
- Design, build, and implement network systems effectively.
- Conduct cyber investigations and analyses.
- Research and analyze various commodity and APT-based malware and techniques.
- Search the existing infrastructure for indications of malware and malicious activities that may evade current security controls.