Cybersecurity Engineer (Splunk)

📋 Job Overview

Horizon Industries Limited (Horizon) is a dynamic IT and Management Consulting firm based in the Washington, DC area. Founded in 1996, Horizon Industries Limited (Horizon) has evolved into a company of highly qualified professionals that provides full-cycle IT Consultant and Management support in both the private and public sectors.

Horizon’s culture is based on our core values, and we PRIDE ourselves on a diverse, employee, and family-centric approach.

🏢 About Horizon Industries Limited

Horizon Industries Limited (Horizon) is a dynamic IT and Management Consulting firm based in the Washington, DC area. Founded in 1996, Horizon Industries Limited (Horizon) has evolved into a company of highly qualified professionals that provides full-cycle IT Consultant and Management support in both the private and public sectors.

🎯 The Role

If you are looking for a challenging cybersecurity opportunity that allows you to develop and learn in a stable and growing organization…come join us as a Cybersecurity Engineer at Horizon. Horizon Industries Limited (Horizon) is a dynamic IT and Management Consulting firm based in the Washington, DC area, and we are currently seeking a Cybersecurity Engineer for a full-time position supporting the Defense Logistics Agency (DLA) on-site in Columbus, OH, or Richmond, VA.

✅ Key Responsibilities

• Performs a variety of routine project tasks applied to specialized cybersecurity problems.
• Tasks involve integration of electronic processes or methodologies to resolve total system problems, or technology problems as they relate to cybersecurity requirements.
• Analyzes information security requirements.
• Applies analytical and systematic approaches in the resolution of problems of workflow, organization, and planning.
• Provides security engineering support for planning, design, development, testing, demonstration, and integration of information systems.
• Analyzes threat information gathered from logs, Intrusion Detection Systems (IDS), intelligence reports, vendor sites, and a variety of other sources.
• Creates customized dashboards using the Security Information and Event Management (SIEM) tool Splunk ES to elevate high-threat items to incident responders.
• Administration knowledge of the Splunk ES and backend database infrastructure related to upgrades and daily maintenance is essential.
• Provide analysis and make recommendations in line with the roles of CERT Incident Handlers (IH) and site Information Assurance Managers (IAM).
• Develop ES rules, reports, dashboards, data monitors, active channels, trends, and use cases to identify threats and optimize data mining across DLA.
• Will research, plan, install, configure, troubleshoot, maintain, and back up all components in the DLA Splunk Enterprise Log Management (ELM) architecture.

📌 Required Qualifications

• Seven (7) years of relevant IT experience
• Primary DCWF Work Role 521: Cyber Defense Infrastructure Support Proficiency Level: Intermediate (any of the following): Security+, CySA+, CEH, SSCP, GSEC, GMON, Cloud+, or PenTest+.
• Secondary DCWF Work Role 451: System Administrator Proficiency Level: Intermediate (any of the following): Security+, Cloud+, GSEC, GICSP, or SSCP.
• Computing Environment: Linux+, Splunk Administrator
• Experience creating custom dashboards and reports in Splunk using threat data.
• Experience in the integration and sustainment of Splunk Core and Splunk Enterprise Security (ES).

⭐ Desirable Experience

Active Top Secret clearance

🎁 Benefits

• A comprehensive benefits package including healthcare (medical, dental, vision and disability)
• a 401k program where you are 100% vested from day one with an employer match after 90 days.
• an Educational Assistance program.
• a Student Loan Repayment Program
• Gym Reimbursement Program.
• Paid Time off
• Dynamics, passionate, multi-disciplinary team of creative minds to work with and many more.

🛂 Visa & Eligibility

Active Top Secret clearance