Technical Service Lead- Enterprise Logging

Why choose between doing meaningful work and having a fulfilling life? At MITRE, you can have both. That's because MITRE people are committed to tackling our nation's toughest challenges-and we're committed to the long-term well-being of our employees. MITRE is different from most technology companies. We are a not-for-profit corporation chartered to work for the public interest, with no commercial conflicts to influence what we do.

The R&D centers we operate for the government create lasting impact in fields as diverse as cybersecurity, healthcare, aviation, defense, and enterprise transformation. We're making a difference every day-working for a safer, healthier, and more secure nation and world. Our workplace reflects our values. We offer competitive benefits, exceptional professional development opportunities for career growth, and a culture of innovation that embraces adaptability, collaboration, technical excellence, and people in partnership.

If this sounds like the choice you want to make, then choose MITRE - and make a difference with us.

Technical Service Lead
- Enterprise Logging

MITRE's Corporate Information Security Division, Cyber Defense Operations Department

MITRE's Corporate Information Security Division is seeking a Technical Service Lead for Enterprise Logging within the Cyber Defense Operations Department. This role is responsible for the strategy, implementation, operation, and continuous improvement of MITRE's enterprise logging service, with primary responsibility for the corporation's Splunk and Cribl platforms. The successful candidate will serve in a hands-on, player-coach capacity, balancing service ownership with direct technical execution to support enterprise monitoring, troubleshooting, audit readiness, and cybersecurity operations.

The Technical Service Lead will partner across cybersecurity, enterprise technology, infrastructure, system administration, and compliance teams to shape logging requirements, manage service priorities, oversee operational budgets and roadmaps, and ensure the logging environment remains secure, scalable, resilient, and aligned to enterprise needs. This individual will contribute to both upstream and downstream logging needs, including annual content reviews, policy updates, onboarding priorities, data routing, filtering, transformation, and retention strategies.

The ideal candidate brings deep experience with enterprise logging operations, including hands-on administration and management of Splunk and Cribl in complex enterprise environments, along with the ability to lead through collaboration, technical credibility, and operational execution.

Roles & Responsibilities :

* Lead MITRE's enterprise logging service, establishing service strategy, priorities, roadmaps, and execution plans while contributing directly to implementation and operational support.

* Provide hands-on administration, troubleshooting, and continuous improvement of the enterprise logging environment, including Splunk infrastructure and Cribl data pipeline components.

* Partner with System Administrators, Information System Security Officers, enterprise technology teams, and other stakeholders to maintain and enhance logging capabilities across the corporation.

* Support day-to-day operations of the logging service, ensuring reliability, performance, scalability, service continuity, and effective handling of log collection, transport, transformation, and indexing.

* Investigate and remediate logging failures, ingestion issues, pipeline bottlenecks, routing errors, forwarder problems, search performance concerns, and other operational issues affecting platform health.

* Manage service planning activities, including budget inputs, licensing considerations, forecasting, roadmap development, and prioritization of enhancements across Splunk and Cribl capabilities.

* Design, deploy, maintain, and improve Splunk infrastructure, including indexers, search heads, clusters, and forwarders, to support high availability, resilience, and operational effectiveness.

* Administer and manage Cribl components used for log routing, reduction, filtering, enrichment, transformation, and delivery to downstream platforms, ensuring data is handled efficiently and in accordance with operational and security requirements.

* Contribute to upstream logging requirements by supporting annual content reviews, policy updates, control interpretation, and enterprise discussions on logging, retention, and audit expectations.

* Lead and support downstream data management activities, including data onboarding, filtering, normalization, routing, transformation, retention, and lifecycle management.

* Integrate new data sources from Windows, Linux, Cisco, and other enterprise systems, ensuring proper ingestion and transport through effective configuration of inputs, source types, indexes, forwarders, and Cribl data flows.

* Develop dashboards, alerts, and reports that provide actionable insights for operations, security monitoring,…