Cribl​/Splunk Engineer

Valiant Solutions is seeking a Cribl/Splunk Engineer
to join our rapidly growing and innovative cybersecurity team!

The Cribl/Splunk Engineer will design, implement, and maintain secure, scalable data ingestion pipelines using Cribl Edge, Cribl Cloud, and Splunk across a variety of cybersecurity data sources. This role is responsible for optimizing data flows, storage, and infrastructure to improve performance, maintain data integrity, meet OMB M-26-14 requirements, and maximize cost efficiency. The Engineer will administer and maintain Cribl and Splunk environments, troubleshoot technical issues, perform upgrades, and collaborate with SOC and cross-functional teams on tool integration, tuning, and incident response.

The ideal candidate brings strong Splunk engineering experience, hands-on Cribl expertise, and the ability to optimize high-volume security data environments for performance, security, and cost.

Named one of the Best Places to Work in the Washington DC area for 12 consecutive years
, Valiant is proud of our employee-centric culture and commitment to excellence.

This position allows for 100% remote work. Remote work requires a high level of trust in our employees, and we strictly adhere to the details outlined in our Remote Work Policy below.

• 4 years of Information Technology Experience
• Bachelor of Science in Computer Science, Information Systems, Mathematics, Engineering, related degree or an additional two (2) years of experience.
• 3+ years of Splunk administration or engineering experience.
• Proficiency in configuring and managing Splunk inputs, setting up data ingestion pipelines, and establishing system connections.
• Knowledge of Splunk's Search Processing Language (SPL), data parsing techniques, and the use of regular expressions for data extraction and transformation.
• Skilled in optimizing data pipelines for performance and efficiency, handling large data volumes, and implementing best practices for data integrity and consistency.

• Cribl Certified Service Consultant (CCSC) or Cribl Certified Engineer (CC Engineer) preferred.
• Cribl Certified Admin (Stream and/or Edge) acceptable.
• Splunk Enterprise or Splunk Cloud Certified Admin bonus.
• Experience as an engineering team lead (representing the team's work to clients).
• Strong analytical and problem-solving skills, with the ability to effectively prioritize and execute tasks

• Design, develop and implement processes for ingesting data from various sources into Splunk using Cribl Edge and Cribl Cloud
• Configure and manage data inputs to accommodate different types of data sources, including logs, metrics, and events to determine compliance with M-26-14 requirements at the FISMA system boundary level.
• Establish and maintain secure and reliable connections between Splunk and external systems or data sources using Cribl Edge and Cribl Cloud
• Monitor, and maintain alerts for failed data inputs.
• Deign and recommend Cribl configurations for optimized performance and maximum cost savings
• Design and implement log storage options maximizing cost efficiency while meeting standards of OMB M-26-14
• Oversee the configuration and maintenance of Cribl and Splunk infrastructure, ensuring optimal performance and security of the environment.
• Collaborate with cross-functional teams to troubleshoot and resolve issues related to Cribl/Splunk functionality.
• Conduct root cause analysis for incidents and implement preventive measures.
• Monitor tool health and performance to identify issues, bugs, or potential improvements.
• Develop, review, and update existing operational documentation (SOPs, Job Aids, application checklists, playbooks, etc).
• Support system access controls, including Account Management, Access Enforcement, Information Flow Enforcement, Least Privilege, and workflow for all user account requests and account recertifications.
• Collaborate with the Security Operations Center (SOC) teams for process optimization, tool tuning, tool integration, information sharing, playbook development, and incident response.
• Perform implementation, administration, operations and maintenance, optimization, & integration of cybersecurity tools, technologies, and services
• Conduct regular Cribl/Splunk Enterprise upgrades for worker nodes, deployment servers, heavy forwarders, and syslog servers.

Valiant Solutions is a security-focused IT solutions provider with public clients nationwide. Named one of the fastest growing…