Summary:
This position focuses on implementing and optimizing cybersecurity measures through advanced tools like Splunk, Tanium, and Microsoft Defender. The role requires expertise in dynamic detection, risk-based alerting, and developing actionable workflows, along with conducting workshops and supporting incident investigations.

Position Info:

• Title: Splunk Cyber Security Solutions Engineer /Architect IV
• Client: Peraton
• Duration: 8 Months
• Location: 6001 Hospitality Court, Morrisville, NC 27560
• Work Mode: Remote for (Morrisville, NC; Falls Church, VA; Eagan, MN) Candidates only

Responsibilities:

• Implement dynamic detections and integrate alerting platforms such as Tanium, SEP, and Microsoft Defender with risk-based alerting frameworks.
• Configure and fine-tune Splunk Core and Splunk Enterprise Security (ES) services, developing advanced use cases for cybersecurity.
• Participate in architecting, designing, and building solutions for the Continuous Monitoring Program.
• Provide training, workshops, and lifecycle support for CISO teams on Splunk usage and content development.
• Support incident investigations and systems maintenance during off-hours or weekends.

Skills/Qualifications:

• Proficiency in developing and implementing Splunk as a SIEM tool, including actionable alerts, dashboards, and workflows.
• Strong understanding of network protocols, device event telemetry, and operating systems.
• Experience with SAAS/cloud-hosted Splunk implementation.
• Knowledge of advanced cybersecurity tools like endpoint defense systems, network defense tools, and anomaly-detection models.
• Ability to create and customize dashboards specific to Risk-Based Alerting (RBA) and correlate risk incident rules.
• Education: Bachelor's, Master's, or PhD in relevant disciplines with 8-15+ years of experience, depending on the degree.
• Certifications (one or more required):
• CompTIA Security+
• Certified Penetration Testing Engineer (CPTE) or Certified Ethical Hacker (CEH)
• Certified Information Systems Auditor (CISA)
• Certified Information Systems Security Professional (CISSP) or advanced CISSP specializations