Sr. Siem Engineer

Secure our Nation, Ignite your Future
Your Growth, ManTech's Promise, OUR Mission. Continue to Secure the Future. Become an integral part of a diverse team while working at an Industry Leading Organization, where our employees come first. At ManTech International Corporation, you'll help protect our national security while working on innovative projects that offer opportunities for advancement.
ManTech is seeking a motivated, career and customer-oriented Senior SIEM Engineerto provide unparalleled support to our customer and develop an exciting and rewarding career within ManTech. This is a remote opportunity.
The Senior SIEM Engineershall provide high quality technical, engineering, analytical, and planning support to achieve customer cybersecurity requirements.
Responsibilities Include, but are not limited to:

• Maintaining and enhancing the CFPB Enterprise Security Log Analysis and Security Information Event Management (SIEM) system.
• Creation and maintenance of correlation logic to analyze log data to support network and system monitoring capabilities as well as developing analysis and reporting dashboards to visualize relevant analytical and operational information
• Implement daily health monitoring of log feeds for detection of loss of or newly available log sources.
• Supporting onboarding new log sources/types and data normalization to effectively work with existing Cybersecurity Tools
• Conducting operation and maintenance of Enterprise Security Correlation and Logging solutions, including Systems Administration of applications and frameworks, to include deployment, break/fix, and tuning at both the application and user experience level.
• Writing, re-writing, troubleshooting notable events within Splunk
• Writing use cases and creating playbooks
• Performing customization, tuning, and performance-improvement activities for two or more advanced security technologies.

Basic Qualifications:

• Subject Matter Expert in Splunk data onboarding and normalization
• Demonstrated experience maintaining Splunk as an enterprise SIEM solution
• Four years of expert level design, implementation, and optimization services for two or more network security technologies, including (but not limited to):
  • Security Information Management (SIM), Intrusion Detection Systems (IDS), Instruction Prevention Systems (IPS), threat detection systems, information technology forensics, encryption, and Enterprise Vulnerability Management Systems (EVMS).
• B.A. or B.S. in related field with four years security solution integration experience. Degree may be substituted with four additional years of network security experience.

Preferred Qualifications:

• 5+ years' experience maintaining Splunk Enterprise
• 3+ years' experience with Splunk Enterprise Security
• 1+ years' experience with Splunk SOAR (formerly Phantom) and/or Splunk User Behavior
• Subject Matter Expert in Splunk data onboarding and normalization
• Demonstrated experience maintaining Splunk as an enterprise SIEM solution
• Splunk Certified Engineer
• Splunk SOAR Engineer (playbook writing)

• Certification: Splunk Certified Enterprise Security Admin or Splunk Enterprise Certified Admin

Security Clearance Requirements:

• Must be eligible to obtain and maintain a Public Trust
• Must be a US Citizen

Physical Requirements:

• Must be able to remain in a stationary position 50% of the time. Needs to occasionally move about inside the office to access file cabinets, office machinery, etc.
• Frequently communicates with co-workers, management, and customers, which may involve delivering presentations.

The projected compensation range for this position is $87,600-$145,200. There are differentiating factors that can impact a final salary/hourly rate, including, but not limited to, Contract Wage Determination, relevant work experience, skills and competencies that align to the specified role, geographic location (For Remote Opportunities), education and certifications as well as Federal Government Contract Labor categories. In addition, ManTech invests in it's employees beyond just compensation. ManTech's benefits offerings include, dependent upon position, Health Insurance, Life Insurance, Paid Time Off, Holiday Pay, Short Term and Long Term Disability, Retirement and Savings, Learning and Development opportunities, wellness programs as well as other optional benefit elections.
For all positions requiring access to technology/software source code that is subject to export control laws, employment with the company is contingent on either verifying U.S.-person status or obtaining any necessary license. The applicant will be required to answer certain questions for export control purposes, and that information will be reviewed by compliance personnel to ensure compliance with federal law. ManTech may choose not to apply for a license for such individuals whose access to export-controlled technology or software source code may require authorization and may decline to proceed with an applicant on that basis alone.
ManTech International Corporation, as well as its subsidiaries proactively fulfills its role as an equal opportunity employer. We do not discriminate against any employee or applicant for employment because of race, color, sex, religion, age, sexual orientation, gender identity and expression, national origin, marital status, physical or mental disability, status as a Disabled Veteran, Recently Separated Veteran, Active Duty Wartime or Campaign Badge Veteran, Armed Forces Services Medal, or any other characteristic protected by law.
If you require a reasonable accommodation to apply for a position with ManTech through its online applicant system, please contact ManTech's Corporate EEO Department at (703) 218-6000. ManTech is an affirmative action/equal opportunity employer - minorities, females, disabled and protected veterans are urged to apply. ManTech's utilization of any external recruitment or job placement agency is predicated upon its full compliance with our equal opportunity/affirmative action policies. ManTech does not accept resumes from unsolicited recruiting firms. We pay no fees for unsolicited services.
If you are a qualified individual with a disability or a disabled veteran, you have the right to request an accommodation if you are unable or limited in your ability to use or access http://www.mantech.com/careers/Pages/careers.aspx as a result of your disability. To request an accommodation please click careers@mantech.com and provide your name and contact information.