Edgewater Federal Solutions is a privately held government contracting firm located near Frederick, MD. The company was founded in 2002 with the vision of being highly recognized and admired for supporting customer missions through employee empowerment, exceptional services, and timely delivery. Edgewater is ISO 9001, 20000-1, 27001 certified, appraised at CMMI Level 3 Maturity for Development and Services, and has been named in the Top Workplaces in the Greater Washington Area Small Companies for 2018, 2019, 2020, and 2021.
Edgewater Federal Solutions is currently seeking a Splunk Engineer with strong Incident Response experience to provide support to an Edgewater Federal government contract.
Responsibilities:
- Identify and respond to complex computer security incidents, communicate findings, and modify defenses and response measures as appropriate
- Develop methods, techniques, and standards and communicate findings to multiple audiences
- Work on complex cyber issues, providing guidance as appropriate to other cyber security personnel
- Contribute to the integration of malware analysis, forensic investigation, and threat research into incident response and long-term understanding of threats
Qualifications:
- Develop and maintain quality queries, dashboards, custom views, saved searches and alerts for internal technical operations team business application owners
- Lead and/or support efforts to prepare for, monitor, detect, analyze/confirm, contain, remediate, and recover from security incidents
- Conduct deep analysis and hunting operations
- Provide Analyst training and workshops on using Splunk
- Develop and implement automation and efficiencies with Splunk
- A thorough understanding of the cyber security environment, including network and host system security issues and concepts, compliance, and certification.
- Thorough understanding of common network and host-based attacks, attack methods, network defense architectures, and security tools.
- Extensive experience with one or more of the following: malware analysis and reverse engineering; enterprise host and memory forensics; network forensics and packet analysis; incident response and incident coordination; penetration testing.
- Experience leading projects or mentoring junior analysts.
- Strong analytical, documentation, and communication skills and the ability to collaborate well in a dynamic team environment.
- Education/Experience: Position typically requires a bachelor’s degree in a technical field and a minimum of 8 years’ related experience, or an equivalent combination of education and experience. At this level post graduate work may be expected.
Desired Qualifications:
- Enterprise forensics tools
- Memory analysis techniques
- Dynamic analysis of software samples via debuggers such as OllyDbg or IDA debugger
- Network signature creation
- ArcSight, Splunk, or similar tools
- Automated analysis and scripting with Python, Perl or similar languages
- Tool integration and event correlation with differing API’s
It has been and continues to be the policy of Edgewater Federal Solutions to provide equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, national origin, age, disability, marital status, veteran status, and/or other status protected by applicable law.
Job Type: Full-time
Benefits:
- 401(k)
- 401(k) matching
- Dental insurance
- Employee assistance program
- Flexible spending account
- Health insurance
- Health savings account
- Life insurance
- Paid time off
- Professional development assistance
- Referral program
- Retirement plan
- Tuition reimbursement
- Vision insurance
Schedule:
- 8 hour shift
- Monday to Friday
Supplemental Pay:
COVID-19 considerations:
Due to the COVID-19 Pandemic, as a condition of employment, all employees are required to be fully vaccinated.
Experience:
- Incident response: 5 years (Preferred)
- Splunk: 3 years (Required)
- Threat Hunt: 1 year (Preferred)
Work Location: One location