Arlington, VA30+ days ago
Requires a Master's degree in Information Systems Security, or related field or equivalent and two (2) years of experience identifying, detecting, and analyzing security threats within technology infrastructure; developing security-focused content for Splunk, including creating complex threat detection logic and operational dashboards; supporting ArcSight, Splunk Enterprise, Splunk Enterprise Security, Splunk UBA, and Splunk Phantom platforms; installing, configuring and administering Splunk enterprise instances and Splunk forwarder agents in Windows and Linux environments; analyzing Splunk logs including splunkd.log, metrics.log, and Scheduler.log to troubleshoot endpoint and agent issues; onboarding data using various methods including Splunk UF, Syslog, and Heavy Forwarder; monitoring system performance and implementing proactive measures to create alerts to identify issues within Splunk and ensure optimal uptime and efficiency; utilizing Bitbucket, GIT, and Ansible to deploy configurations related to data ingestion and Splunk infrastructure; assisting with data ingestion issues with application logs, field extraction, and application server migrations; and in executing duties, utilizing Splunk, Linux, shell scripting, SPL, Splunk DB Connect, JIRA, ServiceNow, Bitbucket, Git, Python, and Splunk Enterprise Security. DB USA Core Corporation seeks an Assistant Vice President in Arlington, VA to develop and implement software tools to assist in the detection, prevention, and analysis of security threats.