Lead Cyber Risk Manager; Splunk Engineer Security Clearance

Position: Lead Cyber Risk Manager (Splunk Engineer) with Security Clearance
Why choose between doing meaningful work and having a fulfilling life? At MITRE, you can have both. That's because MITRE people are committed to tackling our nation's toughest challenges-and we're committed to the long-term well-being of our employees. MITRE is different from most technology companies. We are a not-for-profit corporation chartered to work for the public interest, with no commercial conflicts to influence what we do.

The R&D centers we operate for the government create lasting impact in fields as diverse as cybersecurity, healthcare, aviation, defense, and enterprise transformation. We're making a difference every day-working for a safer, healthier, and more secure nation and world. Our workplace reflects our values. We offer competitive benefits, exceptional professional development opportunities for career growth, and a culture of innovation that embraces adaptability, collaboration, technical excellence, and people in partnership.

If this sounds like the choice you want to make, then choose MITRE - and make a difference with us. The Cybersecurity Risk Management Department (R311) within the Global Security Services Division (R300) is looking to fill a Lead Cyber Risk Manager (Splunk Engineer), with a focus on classified environments. The selected candidate will support multiple sponsors by providing technical support and engineering for a computing system's technical posture operating in an isolated enclave consisting of high-performance computer environments as well as celestial and terrestrial labs.

The ideal candidate will thrive in a fast-paced, collaborative environment, working with cutting-edge technology and contributing to advanced security concepts in classified settings. We seek a proactive individual to lead efforts in integrating security into large engineering projects and acquisition initiatives. Success in this role requires expertise in a wide range of cybersecurity topics, including strategy, planning, policies, procedures, governance, management, protection, detection, mitigation, and cyber and military operations.

Strong verbal and written communication skills are essential for presenting findings, making actionable recommendations, and sharing innovative ideas with Senior Government Sponsors.

Roles & Responsibilities :
The selected candidate will collaborate with System Administrators and Information System Security Officers to maintain the operations of Splunk environments. The candidate will work with logs from Windows, Linux, and Cisco devices to ensure proper data ingestion into Splunk, enabling effective monitoring, troubleshooting, and the creation of actionable dashboards and alerts to support operational and security objectives. They will demonstrate strong problem-solving skills to develop appropriate mitigation strategies and ensure Splunk systems are configured and operated in compliance with Security Technical Implementation Guides (STIG) requirements.

The candidate will manage Splunk user roles, permissions, authentication mechanisms, configuration files, data inputs, and forwarders. The successful candidate will be responsible for the analysis, integration, testing, operations, and maintenance of Splunk system security. They will assist during external security inspections and ensure compliance for all department Splunk environments. Role & Responsibilities
• Infrastructure management:
Design, deploy, and maintain Splunk environments, including clusters, indexers, and forwarders, ensuring high availability, scalability, and performance.
• Data onboarding:
Identify and integrate new data sources into Splunk, creating and managing data inputs, indexes, and source types.
• Data analysis and reporting:
Develop custom dashboards, reports, and alerts using SPL to visualize trends and provide actionable insights.
• Troubleshooting and optimization:
Monitor the health of the Splunk environment, troubleshoot issues, and optimize search performance and data retention policies.
• User support and collaboration:
Work with end-users to gather requirements, assist with searches, and provide training on Splunk usage and best practices. Collaborate…