Security Engineer Tier 2

Security Engineer- Tier 2

The company is looking for creative individuals interested in helping grow something truly unique in their markets. While the ideal candidate is great at independently getting their work done, at the same time they are a team player who readily and proactively contributes to team activities to both the team and client's consistent satisfaction.

This position will be a 6-month contract-to-hire and will need to come into their Manassas, VA or Washington D.C. 2-3 days a week.

What You Will Be Doing:

• Engage in the development, deployment, and administration of Splunk.
• Participate in the development, deployment, and administration of virtual infrastructure, as well as packet capture and NetFlow systems, cloud access security brokers (CASBs), and similar security tools.
• Contribute to the development, deployment, and administration of firewalls such as Palo Alto or Checkpoint.
• Contribute to the development, deployment, and administration of identity management or multifactor authentication systems such as Centrify, Okta, or RSA Security Identity.
• Establish alerts that activate based on configured settings to deploy actions or send notifications, emails, or attachments to specified email addresses or groups.
• Conduct regular reviews of Web Application Firewall (WAF) events to detect anomalous behavior.
• Formulate security rules (alerts) that trigger on anomalous activities or threat detections.
• Address security tool, infrastructure, or system issues as they arise.
• Verify virtual server availability, functionality, integrity, and efficiency.
• Manage virtual server resources, including performance, capacity, availability, serviceability, and recoverability.
• Monitor and maintain server configurations.
• Diagnose and resolve issues with failed servers or connectivity problems.
• Oversee Splunk licenses, indexers, and search heads through configuration management and capacity monitoring.

Required Skills & Experience:

• Four years of experience in Information Technology, Cybersecurity, or a related domain.
• Hands-on experience for four years or more with security monitoring tools encompassing IDS/IPS, Firewalls (FWs), NACs (Network Access Control), Identity Management systems, and protocols such as NetFlow (including Snort, Bro, Palo Alto, Checkpoint, Cisco ISE, FireEye, Gigamon), as well as Web Application Firewalls.
• Proficiency with both Linux and Windows operating systems.
• Familiarity with Splunk.
• Proficient in working with cloud services, including AWS, Azure, O365, and cloud access security brokers.
• Competence in utilizing network monitoring tools with a comprehensive understanding of network protocols.
• Capability to conduct security analysis and contribute to the development and implementation of security policies, standards, and guidelines.
• Aptitude to swiftly analyze, assess, and comprehend complex security issues and their impact on a customer's business.

Applicants must be currently authorized to work in the United States on a full-time basis now and in the future.
This position doesn't provide sponsorship.