Cybersecurity Application Support Specialist w/Splunk
Job Description
Job Description
The application support specialist provides technical support and maintenance for software applications. This role involves troubleshooting application issues, managing user access, performing system upgrades, and working closely with the developers to suggest improvements. In the event of an issue, they will be responsible for troubleshooting, event resolution and after-action reviews to improve documentation or processes. They will be responsible for proactively monitoring all supported applications to ensure their performance and useability.
• Minimum of three years of experience supporting applications.
1) Responsible for providing 24x7 support for SIEM (which is Splunk), SOAR, and Docker systems. Contractors shall maintain a rotation of responsible personnel and provide the list to the SOC for who the on-call support person is. Personnel must respond within 1 hour of notification or alert and begin troubleshooting.
2) Responsible for developing a backup and recovery system that allows for an application restoration with a Maximum Tolerable Downtime (MTD) of 4 hours. The system must have backup capabilities so that the Recovery Point Objective (maximum acceptable data loss for any event) is limited to 1 hour.
3) Responsible for fully documenting and testing restore procedures to include full live restore of all applications annually. Backup and restore failures must be reported within one business day of identification.
4) Responsible for planning and testing upgrades of the SIEM (Splunk Enterprise Security), SOAR, and Docker platforms.
5) Responsible for maintaining the Docker Development and DSDL environment. Includes creation and updating of containers to be used by other SMI personnel.
6) Assist the Systems Engineer in maintaining the Linux (Red Hat, CentOS, Ubuntu, etc.) systems and Windows Server systems. Linux and Windows proficiency is required.
• Responsible for ensuring the operational readiness of SOC applications to include but not limited to Splunk Enterprise Security, Splunk Phantom and Microsoft Sentinel, NetWitness, Mandiant Security Verification, and SightGain.
• The Application Support Specialist and the Systems Engineer will probably be required to back each other up and backup the incumbent Cybersecurity Systems Engineer - Senior on some of the work, firewall rules, vulnerability scanners (Nessus, Qualisys) etc.
• This role also requires on-call after-hours support when users experience an issue.
Company DescriptionIT Professional Services Firm focused on networking, UC, Cloud, security, automation, cyber security - www.quadtec.com
Company Description
IT Professional Services Firm focused on networking, UC, Cloud, security, automation, cyber security - www.quadtec.com