Principal SIEM Engineer (ArcSight & Splunk)

Job Category : Information Technology Requisition Number : PRINC003140 Apply now Posted: November 25, 2024 Full-Time On-site Locations Showing 1 location Washington - DC Description Capgemini Government Solutions (CGS) LLC seeks a highly motivated SIEM engineer with experience managing both ArcSight and Splunk. The ArcSight/Splunk Engineer will be responsible for configuring the collection, parsing, correlation, and visualization of events for a critical operational system. The individual will lead efforts for configuring the systems which support analysts and end-users. The successful candidate will support the collection and extraction of data used to refine existing and new reports, analytics, and dashboards, and will be involved with the drafting and creation of reports and dashboards based on end-user requirements. As a Principal SIEM Engineer (ArcSight & Splunk), you will be: Responsible for design, implementation and support of ArcSight or Splunk core components, including ESM, Loggers, Smart Connectors, Indexers, Forwarders, Search Heads, and Cluster Managers. Responsible for configuration and administration of ArcSight or Splunk ingestion and forwarding for new and existing applications and data. Responsible for troubleshooting ArcSight or Splunk dataflow issues between the various event flow components. Responsible for configuring and deploying data collection for a variety of operating systems and networking platforms. Responsible for creating Dashboards and Analytics within SIEM tools. Working with monitoring systems supporting auditing, incident response, and system health. Responsible for understanding networking components and devices, ports, protocols, and basic networking troubleshooting steps. Required Qualifications: US citizenship is required. Top Secret with SCI eligibility. Bachelor's degree in information technology, Computer Science, Information Systems, or related field. A minimum of 8 years of related cybersecurity experience. A minimum of at least 4 years of experience with either ArcSight or Splunk. Experience in design, implementation, and support of ArcSight or Splunk core components. Experience with configuration and administration of ArcSight or Splunk ingestion and forwarding. Experience with troubleshooting ArcSight or Splunk dataflow issues. Experience configuring and deploying data collection for various operating systems and networking platforms. Experience creating Dashboards and Analytics within SIEM tools. Experience working with monitoring systems supporting auditing, incident response, and system health. Understanding of networking components and devices, ports, protocols, and basic networking troubleshooting steps. The ability to troubleshoot issues with log feeds, search time, and field extractions. The ability to troubleshoot problems related to data solutions. Desired Skills: Network Security Operations Center (SOC) experience. Experience and talent in data correlation. Experience creating workflows for Incident Response within a SIEM Tool. GIAC Certified Incident Handler Certification. Cybersecurity certifications. Formal SIEM training. Life at Capgemini Capgemini supports all aspects of your well-being throughout the changing stages of your life and career. For eligible employees, we offer: Healthcare including dental, vision, mental health, and well-being programs. Financial well-being programs such as 401(k) and Employee Share Ownership Plan. Paid time off and paid holidays. Paid parental leave. Family building benefits like adoption assistance, surrogacy, and cryopreservation. Social well-being benefits like subsidized back-up child/elder care and tutoring. Mentoring, coaching and learning programs. Employee Resource Groups. Disaster Relief. About Capgemini Capgemini is a global leader in partnering with companies to transform and manage their business by harnessing the power of technology. The Group is guided every day by its purpose of unleashing human energy through technology for an inclusive and sustainable future. Disclaimer Capgemini is an Equal Opportunity Employer encouraging diversity in the workplace. All qualified applicants will receive consideration for employment without regard to race, national origin, gender identity/expression, age, religion, disability, sexual orientation, genetics, veteran status, marital status or any other characteristic protected by law. #J-18808-Ljbffr

Created: 2025-02-01