Senior Digital Forensics Incident Response Analyst (DoD TS/SCI

COMPANY OVERVIEWrnFounded in 2007 in Huntsville, AL, MartinFed provides the U.S.

government with customer-focused, performance-based solutions using technology and an empowered workforce as an engine to drive its customers' missions.

Our goal is to attract the best and brightest within their field.

rnWe invest in our people because they are our greatest asset.

They cultivate our purpose, embody and reflect our core values, and define our culture.

MartinFed's core values that set us apart are the following:rnrnBe Driven - We are fueled by the hunger to learn more and do more.rnBe Curious - We engage in continuous improvement - never accepting the status quo.rnBe Humble - We seek honest feedback to strengthen our relationships.rnPursue Excellence - We strive to achieve extraordinary results and do not settle for mediocrity.

rnrnStrive for excellence and consider joining our growing team today!rn rnPlease Note: This position is contingent upon awardrn rnJOB OVERVIEWrnJob Summary: The SIEM Engineer is responsible for designing, implementing, and managing SIEM solutions to collect, analyze, and visualize data from various sources within government agencies.

This role involves configuring SIEM environments, creating dashboards, and ensuring the effective use of SIEM's capabilities to monitor, detect, and respond to security threats and operational insights.

The SIEM Engineer collaborates closely with IT teams, security analysts, and stakeholders to optimize data intelligence and drive informed decision-making.rnEssential Functions:rnrnSIEM Deployment and Configuration:rnrnDesign and deploy SIEM environments, including configuring indexers, search heads, and forwarders, to support data collection and analysis needs.rnOptimize SIEM configurations to ensure efficient data storage, retrieval, and search capabilities.rnrnrnData Collection and Integration:rnrnDevelop data ingestion strategies, create data inputs, and set up data source integration for various log and event data types.rnDesign and implement data normalization and transformation processes for consistent and accurate analysis.rnrnrnDashboard and Visualization Development:rnrnDesign and create interactive dashboards, reports, and visualizations using SIEM's capabilities.rnPresent data insights in a clear and actionable manner to support decision-making processes.rnrnrnSearch Queries and Alerts:rnrnDevelop and optimize search queries and alert mechanisms to proactively monitor for security threats, anomalies, and operational issues.rnConfigure alerts to trigger automated responses or notifications based on predefined criteria.rnrnrnSIEM App Development:rnrnBuild custom SIEM apps and add-ons to extend functionality and support specific agency requirements.rnCollaborate with development teams to integrate SIEM with other systems and tools.rnrnrnSecurity and Compliance:rnrnImplement security controls and best practices to protect data stored in SIEM and ensure compliance with relevant regulations and standards.rnMonitor and analyze security-related events to detect and respond to potential threats.rnrnrnPerformance Optimization:rnrnMonitor system performance and troubleshoot issues related to data indexing, search performance, and resource utilization.rnImplement optimizations to enhance SIEM's efficiency and responsiveness.rnrnrnTraining and Documentation:rnrnProvide training and guidance to other team members on SIEM best practices, usage, and administration.rnCreate documentation for configurations, processes, and troubleshooting procedures.rnrnrnrnQualifications:rnrnBachelor's degree in Computer Science, or a related field.rnProven experience in designing, deploying, and managing SIEM environments, preferably within government or enterprise environments.rnStrong understanding of data analytics, log management, and data visualization principles.rnProficiency in Splunk query language (SPL) and the ability to develop complex search queries and reports.rnKnowledge of cybersecurity concepts, threat detection, and incident response strategies.rnFamiliarity with security standards and regulations (NIST, FISMA, etc.) applicable to data analysis and storage.rnExcellent problem-solving skills and the ability to diagnose and resolve technical issues.rnStrong communication skills, both written and verbal, to convey technical concepts effectively.rnAbility to obtain and maintain a Top Secret security clearance.rnrnPHYSICAL REQUIREMENTS & ENVIRONMENTAL CONDITIONS rnrnInside office environment.rnWorking on a computer for long periods of time.rnMay involve long period of sitting at a desk.rnThe work environment is fast-paced and sometimes involves extreme deadline pressures.rnrnOTHER DUTIESrnThis job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job.

Duties, responsibilities, and activities may change at any time with or without notice.rn rnMartinFed is an Equal Opportunity/Affirmative Action Employer.

All qualified applicants will receive consideration for employment without regards to race, color, religion, religious creed, gender, sexual orientation, gender identity, gender expression, transgender, pregnancy, marital status, national origin, ancestry, citizenship status, age, disability, protected Veteran Status, genetics or any other characteristics protected by applicable federal, state or local law.

We also consider qualified applicants regardless of criminal histories, consistent with legal requirements.

In addition to federal law requirements, MartinFed complies with all applicable state and local laws governing nondiscrimination in all locations.

rnIf you are a qualified individual with a disability or disabled veteran, you have the right to request a reasonable accommodation if you are unable or limited in your ability to use or access MartinFed's current openings as a result of your disability.

You can request reasonable accommodations by calling . Thank you for your interest in MartinFed.

Full Time