Tenable ACAS & Splunk Administrator

Job Title: Tenable ACAS & Splunk Administrator

Location: Remote

Clearance required by project: Secret

Certification required by project: CompTIA SEC+

Role Description:

Provide management, configuration, administration, implementation, and optimization of SPLUNK infrastructure and all supported systems throughout the enclave.

Manage technologies and processes to sustain and improve the SPLUNK environment's performance. Configure servers and modify host/agent files in conjunction with DISA STIG, DoD policies, and Vendor best practices.

Skills:

- Provide support, monitor, and take corrective action to support SPLUNK infrastructure.

- Provision SPLUNK systems to support of necessary scanning requirements.

- Design, plan and implement sound systems infrastructure strategies.

- Support the SPLUNK systems development, planning, deployment, data management, and disaster recovery

planning best practices and testing.

- Perform all security patching of host systems in compliance with IAV updates, ACAS reporting and Vendor

best practices.

- Provide backup, recovery and archiving of all host systems configurations via the data protection solution.

- Perform and enable controls to ensure the virtual infrastructure security posture maintains compliance with

DISA STIGs and DoD regulations.

- Provide systems, performance monitoring and traffic monitoring via weekly reports provided to management.

- Document incidents using the ticket tracking system.

- Maintain existing and when required create new WPs.

- Provide support, analysis, and incident resolution.

- Due to the 24/7 availability requirements of Information Systems in support of Enterprise customers across the

globe, emergent response outside of normal working hours may be required

Experience: 5 years

Education: Associate's Degree