Job Details

The position will focus on SIEM and log management and endpoint detection/response.

This position requires a thorough understanding of network security, routing, firewalls, cloud, and incident response.

1. U.S. Citizenship required
2. Active Secret clearance
3. 4+ years of directly relevant experience
4. 4+ years of experience with administration of Splunk or a similar SIEM
5. Splunk experience: Architect, design, engineer, support, configure, administer content and maintain infrastructure for a highly available and disaster recovery configuration
6. Splunk experience: Administer Splunk and Splunk Application for Enterprise Security log or event management
7. Expertise with EDR toolsets
8. Experience with scripting is a plus (e.g., PowerShell, bash/ksh/sh, python)
9. Ability to assist team with Incident response and handling

This position will be at least 60% on-site in Newport, RI.

Various cyber security and relevant degree is a plus!