SIEM Administrator Security Clearance

Responsibilities

• Serve as the primary Splunk platform administrator, designing, implementing, administering, and maintaining Splunk Enterprise and Splunk Enterprise Security (ES) deployments including configurations, indexes, apps, knowledge objects, data inputs, and security content while ensuring optimal performance, availability, and smooth installation of updates and patches.
• Monitor and maintain overall SIEM system health and security posture by tracking performance and capacity, conducting STIG and PKI compliance activities, reviewing and validating ACAS scan results, auditing security practices to prevent incidents, and proactively identifying system shortfalls, discrepancies, and opportunities for improvement or automation.
• Develop and enhance security monitoring capabilities through the creation of dashboards, alerts, reports, correlation logic, and new data inputs; partner with system administrators and developers to expand visibility, troubleshoot issues, and build workflows for CND-related assets and Service Now-integrated processes.
• Maintain operational readiness and documentation by managing configuration baselines, recording all changes, evaluating daily Service Now tickets, ensuring continuous compliance with DoD/USINDOPACOM requirements, and supporting after-hours or weekend activities for scheduled or unscheduled outages.

• Must have at least four years of system, network administration or developer experience and two years of Splunk administration.
• Must have Splunk Enterprise Certified Admin credential.
• Must have experience administering Linux servers.
• Must have experience with SIEM content development.
• Demonstrated strong analytical and problem‑solving skills.
• An active Secret clearance is required.
• Must meet DoD 8140.03-M, Intermediate Proficiency.

• Prefer Red Hat Linux administrator certification (RHCSA/RHCE).
• Prefer experience with Splunk Enterprise Security.
• Prefer experience in a virtualized environment (VMware, etc).
• Prefer one or more relevant CND certifications: CISSP, CASP, OSCP, CySA+, CEH, or GCIH.

The company offers a comprehensive benefits program, including medical, dental, vision, life insurance, 401(k) and a range of voluntary benefits. Paid Time Off (PTO) is offered to regular full-time and part-time employees.

Job ‑23558
Work Type:
On‑Site
Pay Range: $127,000 – $132,000 per year