Cribl Engineer
About the Role
Are you excited at the prospect of developing innovative solutions to enable secure and reliable operations of enterprise computer systems? Are you fascinated by the possibilities presented by engineering, designing, development, and implementation of enterprise network cyber defense capabilities to prevent sophisticated cyber threats? In an increasingly connected world, it is critical to understand the fundamentals of layered defense and Zero Trust technologies.
As a Splunk and Cribl Engineer, you will prevent adversary network threats, identify advanced attack vectors, and thwart methods of exploitation. You’ll work individually or in a small integrated team, lead a task, project, or team, ensure project completion, and provide guidance to lower-level technicians, specialists, and managers. You’ll provide expertise in the engineering, design, development, direction, and implementation of enterprise network cyber defense capabilities.
Responsibilities
- Build and maintain data pipelines leveraging tools such as Cribl
- Apply familiarity with the utilization, configuration, and implementation of cyber defense capabilities, including:
- Web content filters
- Email security capabilities
- Intrusion Detection Systems (IDS)
- Intrusion Prevention Systems (IPS)
- Host Based Security Systems (HBSS)
- Security Incident and Event Management (SIEM) tools
- Domain Name System (DNS) security practices
- Advanced log analysis
- Network monitoring
- Network flow analysis
- Packet capture analysis
- Network proxies
- Firewalls
- Anti-virus capabilities
- Linux or UNIX command line
- Access control lists
- Improve Booz Allen’s delivery to clients through cybersecurity initiatives
- Lead tasks, projects, or teams
Requirements
- 3+ years of experience building data pipelines leveraging tools such as Cribl
- Experience with Windows and Linux, including installing, configuring, or maintaining server operating systems and applications
- Experience working with STIGs, SCAP, and cybersecurity best practices
- TS/SCI clearance
- HS diploma or GED
- DoD 8570 IAT II compliant Certification, such as Security+, CCNA Security, or GSEC
Nice to Have
- Experience with Kubernetes
- Experience with big data analytics, machine learning, artificial intelligence, or anomaly detection
- Experience scripting in PowerShell, BASH, Python, or Perl
- Experience in DoD, Intelligence Community, or other regulated environments
- Knowledge of Zero Trust Architecture (ZTA) principles
- Ability to automate security configurations of Linux and Windows systems, and recommend and implement remediations for non-compliant security controls
Benefits
At Booz Allen, we celebrate your contributions, provide opportunities and choices, and support your total well-being. Our offerings include:
- Health, life, disability, financial, and retirement benefits
- Paid leave
- Professional development and tuition assistance
- Work-life programs and dependent care
- Recognition awards program for exceptional performance and superior demonstration of our values
Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet this threshold are only eligible for select offerings, not inclusive of health benefits.
Pay
Salary at Booz Allen is determined by various factors, including but not limited to location, the individual’s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $99,000.00 to $225,000.00 (annualized USD).
Schedule
This posting will close within 90 days from the posting date.
Work models include:
- Remote: Generally virtual, with occasional in-person work at a Booz Allen or customer facility as required.
- Hybrid: Frequent work from a Booz Allen facility, with potential visits to customer facilities as needed.
- Onsite: Work primarily performed at a Booz Allen office or customer facility, collaborating directly with colleagues and customers.
Employees working virtually are generally expected to have their cameras on during meetings to support engagement and effective communication.