Work You'll Do:
- Measure compliance with OMB Memorandum M-26-14 once the logging reference architecture (LRA is released) and provide recommendations for improvement.
- Assess and monitor security data feeds and improve coverage of key security data sources.
- Provide subject-matter expertise to support log monitoring and normalization.
- Create and update reports and alerts to assess data quality and compliance with security requirements.
- Collaborate with SOC, IT, and application teams to identify and address issues.
- Provide regular reports to senior management and data owners on the status of monitoring and M-26-14 implementation.
- Write documentation and standard operating procedures (SOPs) for custom data sources and application configurations.
What You Have:
- US Citizenship is Required.
- 4+ years of experience in the cyber security field
- Bachelor's degree required, ore equivalent years of experience (4 years, 8 years+ total)
- Experience with Qmulos apps for Splunk a big plus.
- Experience with Splunk Enterprise or Splunk Cloud preferred.
- Experience with Red Hat Enterprise Linux administration.
- Experience with log management and analysis.
- Familiarity with OMB Memorandum M-26-14.
- Ability to track and make progress on multiple tasks in parallel.
- Ability to collaborate with multiple teams and provide clear, concise directions during technical troubleshooting.
- Splunk Certifications are highly desired in this role.
What We Offer:
- 401(k), including an employer match of 100% of the first 3% contributed and 50% of the next 2% contributed
- Medical, Dental, and Vision Insurance (available on the 1st day of the month following your first day of employment)
- Group Term Life, Short-Term Disability, Long-Term Disability
- Voluntary Life, Hospital Indemnity, Accident, and/or Critical Illness
- Participation in the Discretionary Time Off (DTO) Program
- 11 Paid Holidays Annually
Skills Required
- US Citizenship
- 4+ years of experience in the cyber security field
- Bachelor's degree (or equivalent experience)
- Experience with Qmulos apps for Splunk
- Experience with Splunk Enterprise or Splunk Cloud
- Red Hat Enterprise Linux administration experience
- Experience with log management and analysis
- Familiarity with OMB Memorandum M-26-14
- Ability to manage multiple tasks in parallel
- Ability to collaborate with cross-functional teams and guide technical troubleshooting
- Splunk Certifications
What We Do
Unified Security Operations, Delivered. We tear down the walls between red and blue teams & address risk exposure when it’s discovered—not weeks later. UltraViolet Cyber is a leading platform-enabled unified security operations company providing a comprehensive suite of security operations solutions. Founded and operated by security practitioners with decades of experience, the UltraViolet Cyber security-as- code platform combines technology innovation and human expertise to make advanced real time cybersecurity accessible for all organizations by eliminating risks of separate red and blue teams. By creating continuously optimized identification, detection and resilience from today’s dynamic threat landscape, UltraViolet Cyber provides both managed and custom-tailored unified security operations solutions to the Fortune 500, Federal Government, and Commercial clients. UltraViolet Cyber is headquartered in McLean, Virginia with global offices across the U.S. and in India.
