Computer Application Development and Engineering (SIEM)

• Develop, administer, and maintain enterprise SIEM capabilities. * Normalize network, device, and system logs for SIEM ingestion and analysis. * Build dashboards that monitor and correlate security events of interest. * Support SIEM functions hosted on UNIX/Linux-based platforms

Required Education / Experience Bachelor of Science/Arts degree in Engineering, Computer Science, Science, Business Administration, or Mathematics plus three (3) years of specialized experience; or an Associate’s degree plus seven (7) years of specialized experience; or a major certification plus seven (7) years of specialized experience; or eleven (11) years of specialized experience.

Required Specialized Certification At least one of the following: GDSA; Elastic Certified; Splunk Enterprise Certified Admin; Splunk Enterprise Certified Architect; Microsoft Certified: Cybersecurity Architect Expert; ArcSight Enterprise Security Manager Advanced Administrator Certified Expert.

Required Specialized Experience Four (4) years of experience using, developing, and maintaining SIEM software; two (2) years of experience with UNIX/Linux based platforms; experience normalizing disparate network, device, and system logs into an ingestible format; and experience building system dashboards to monitor and correlate events of interest