Description

You will conduct penetration testing and manage Splunk infrastructure to secure agency applications and networks.

This role is remote.

Responsibilities

• Perform remote and onsite penetration tests on systems, networks, and applications to identify security weaknesses.
• Analyze vulnerabilities and provide detailed reports including findings, risks, and mitigation methods.
• Manage Splunk data collection infrastructure, including server management for Universal Forwarder deployment and Syslog server configuration.
• Develop custom scripts for data collection and integration with non-standard products.
• Collaborate with IT teams to define testing requirements and recommend security improvements.

Required Skills

• 4+ years of penetration testing experience.
• 3+ years of Splunk administration experience.
• 2+ years of vulnerability management experience.
• 2+ years of security awareness experience.
• Proficiency with Java, .NET, or JavaScript for custom application data collection.
• Experience managing Splunk heavy forwarders, HTTP event collectors, and Splunk Stream.
• Ability to re-architect Syslog aggregation and configure high availability storage.

Preferred Skills

• 3+ years of risk assessment experience.
• 3+ years of experience with NIST 800-53 frameworks.

Key Skills

Education

Any Graduate