US CITIZEN ONLY. SECRET CLEARANCE REQUIRED. MUST HAVE IT-II CERT (IE SECURITY+)

SIEM/Elastic Specialist will:

• Be responsible for designing & setting up the ingestion of various customer data flows to include pre-processing data into a useable format, ensuring proper parsing and indexing
• Collaborate with cross-functional teams and responsible for designing & integrating Elastic with a wide variety of data sources and developing associated knowledge objects such as queries, dashboards, reports, alerts for monitoring and analytics
• Perform data transformation using Elastic query language
• Track the health of the Elastic environment and optimize its performance. Troubleshoot and resolve issues related to security, performance, data indexing, and searches
• Perform watch-officer monitoring duties, including:
○ monitoring, detecting, investigating, and responding to cybersecurity threats and events using Elastic /SIEM Platform
○ Reviewing correlated alerts and logs for compromise scenarios
○ Performing triage of security alerts to prioritize response
○ Identifying false positives
○ Investigating security incidents and determining root cause
○ Collecting and preserving logs for analysis
○ Escalating confirmed incidents to leadership or SOC teams
○ Coordinating with IT or DevOps for containment and remediation
○ Creating after-action reports (AAR) post-incident
• In addition, the role may include assistance with monitoring Vulnerability Management tools, such as ACAS and ePO.

QUALIFICATIONS:

• Have at least three years of working knowledge and hands-on experience with Elastic/Splunk query languages, monitoring SIEM dashboards and real-time alerts, fine-tuning SIEM rules to reduce noise, and NIST 800-53 & DevSecOps frameworks

Apply for this position

Required*

Apply with Indeed

First Name*

Last Name*

Email Address*

Phone*

Address

Resume*

We've received your resume. Click here to update it.

Attach resume or Paste resume

Attach resume as .pdf, .doc, .docx, .odt, .txt, or .rtf (limit 5MB) or Paste resume

Paste your resume here or Attach resume file

Have you ever previously applied for employment with Diligent Consulting Inc.?*

If Yes, date applied?

Explain your job or career objective.

Are you willing to relocate?*

If Yes, desired location(s).

Are you willing to travel?*

Travel Percentage?

Education/Training:

High School Name:

City & State:

Course of Study:

Years Completed* 1234

Did you graduate?*

Graduation Year

Undergraduate College/University Name:

City & State:

Course of Study / Major:

Years Completed: 1234

Did you graduate?

Graduation Year:

Degree received:

Did you serve in the U.S. Armed Forces?*

If Yes, in which branch?

Describe any military training relevant to the position you are applying for:

List other specialized training, certifications or skills (e.g. CISSP, Security+, Programming Languages etc.)

Proof of Certification (1)

Proof of Certification (2)

Proof of Certification (3)

Employment History:
(Please give accurate, complete, full and part-time employment record. Starting with your present or most recent position.)

Company Name:*

Title:*

Address:

Telephone:*

Employment Start Date:*

Employment End Date:

This is my current Employer*

Supervisor:

Briefly describe your work:

Reason for Leaving:

Company:

Title:

Address:

Telephone:

Employment Start Date:

Employment End Date:

Supervisor:

Briefly describe your work:

Reason for Leaving:

Company Name:

Title:

Address:

Telephone:

Employment Start Date:

Employment End Date:

Supervisor:

Briefly describe your work:

Reason for Leaving:

Professional Attainments and Memberships:
(Exclude those which may disclose your race, color, religion or national origin)

Honors, Awards, Fellowships etc.

Professional Societies and Civic Organizations Memberships:

Professional References:
(Please provide 3 professional references we may contact. Diligent Consulting Inc. requires that we speak with at least 2 previous supervisors or managers)

Reference 1 Name:*

Company:*

Telephone:*

Email:

Affiliation:*

Reference 2 Name:*

Company:*

Telephone:*

Email:

Affiliation:*

Reference 3 Name:*

Company:*

Telephone:*

Email:

Affiliation:*

Have you ever been convicted of a felony?*

Security Clearance:

Have you ever been granted a Security Clearance:*

If, Yes, is your clearance current?*

Current Clearance Access:

Name of Agency granting authority:

Date of last investigation:

Social Security Number:*

Have you ever been denied a security clearance or had a clearance revoked?

If Yes, fully explain:

Signature:

Authorization:* I certify the information in this application for employment to be true, accurate and complete. Any misstatement or omission of fact on this application may result in dismissal if employed or be used as part of the employment decision.I authorize Diligent Consulting to contact any previous employer or reference I have provided, and understand that the information received may be used as part of the employment decision.I give Diligent Consulting permission to do any background checks necessary

Signature:
(please type your name below)*

Date Signed:*

The following questions are entirely optional.

To comply with government Equal Employment Opportunity and/or Affirmative Action reporting regulations, we are requesting (but NOT requiring) that you enter this personal data. This information will not be used in connection with any employment decisions, and will be used solely as permitted by state and federal law. Your voluntary cooperation would be appreciated. Learn more.

Gender

Race/Ethnicity

Human Check*

Submit Application

Diligent Consulting Inc

Thanks for visiting our Career Page. Please review our open positions and apply to the positions that match your qualifications.

Cyber Security Incident and Event Management/Elastic Specialist

Apply for this position