Coalfire Federal is a market leading cybersecurity consultancy firm that provides independent and tailored advice, assessments, technical testing and a full suite of cyber engineering services to Federal agency customers.  Coalfire Federal along with its parent company, Coalfire, has an unparalleled client list with deep customer relationships with leading cloud and technology providers including Amazon, Microsoft, IBM, Google and Oracle and Federal agencies.  Coalfire has been a cybersecurity thought leader for over 20 years and has offices throughout the United States and Europe and is committed to making the world a safer place by solving our clients’ toughest security challenges. 

But that’s not who we are – that’s just what we do.

We are thought leaders, consultants, and cybersecurity experts, but above all else, we are a team of passionate problem-solvers who are hungry to learn, grow, and make a difference.  

We’re currently seeking a Mid Splunk Administrator/Engineer with an Active Top Secret Clearance to join our Coalfire Federal team. 

Location Details: Full time on goverment client site in Crystal City, VA 

• Provide technical support to the Security Operations Center
• Monitor system resources and determine system modifications to support customer requirements.
• Support design and build of architecture for data availability and disaster recovery.
• Help implement new technical features to support customer for changing roles and mission.
• Develop custom Splunk content including scheduled searches, reports, and dashboards.The custom content includes:
  • Agency analyst app for general helpdesk assistance and log monitoring.
  • Oracle Investigation app for database monitoring, reporting and incident analysis.
  • Reports for continuous monitoring of NIST 800-53 and ICS 500-27 auditing controls, network changes, account and logging level changes.
• Monitor security level events such as account management, vulnerability alerts, anti-virus, and data transfers. 
• Help manage data on-boarding for custom content for applications and severs and maintains and administers enterprise Splunk implementations.
  

• Excellent verbal and written communication skills and the ability to work both independently or collaboratively on several assessment tasks concurrently. 
• Willingness to learn and implement new cyber monitoring tools as part of an operations center
• Ability to work independently and as part of a team. 
• Professional attitude and demeanor. 
• Critical thinking, and ability to balance security requirements with mission needs. 
• Ability to work quickly, efficiently and accurately in a dynamic and fluid environment.

Education 

Completed Bachelor’s degree from an accredited university, preferably in an IT related field.

Clearance / Suitability 

At minimum, an active Top Secret Clearance is required for this role.

Certifications 
Completed certification(s) in at least one product, i.e., Microsoft, Splunk. 

Years of Experience 

• • 3 years technical IT experience operating and maintaining enterprise IT servers or assessment experience supporting cybersecurity and security programs
  • 2 years of experience working in a classified IT environment to maintain and/or administer Splunk implementations.

• Knowledge and/or experience using Xacta
• Knowledge of Nessus, Big Fix or similar tools
• CISSP, CISM, or CISA certification
• Knowledge of DISA STIGS, CIS Benchmarks
• Experience with MS Project and Visio
• Knowledge of CMS security policies, procedures, standards, and methodologies

Our people make Coalfire Federal great. We work together on interesting things and achieve exceptional results. We act as trusted advisors to our customers and are committed to client-focused innovation as well as innovation in the industries that we serve.

Coalfire offers our people the chance to grow professionally with colleagues they like and respect while tackling challenges that stretch their minds and expand their skill sets. Regardless of location, you’ll experience a company that prioritizes connection and wellbeing and be part of a team where people care about each other and our communities. You’ll have opportunities to join employee resource groups, participate in in-person and virtual events, and more.

You’ll enjoy competitive perks and benefits to support you and your family, like paid parental leave, flexible time off, certification and training reimbursement, digital mental health and wellbeing support memberships, and comprehensive insurance options.  

Coalfire is an EEO employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.