Senior Splunk Engineer – TS​/SCI, CI Poly

Job Responsibilities

• Implement, manage, and optimize the Splunk platform to automate and orchestrate security operations
• Develop custom playbooks for various stakeholders
• Integrate Splunk with other security tools
• Enhance the organization's overall security posture
• Create custom Splunk reports, dashboards, and content according to customer requirements
• Troubleshoot Splunk instances
• Execute tasks outlined in the scope of work and follow standard operating procedures with minimal oversight
• Work with clients to analyze and understand their needs and objectives
• Serve as the escalation level for complex issues
• Aid Associate, Level I, and Level II Engineers on sophisticated tasking

• Currently holds a TS/SCI with CI polygraph
• Security certification (e.g., Security+, CISSP) required
• 7–10 years of related work experience required
• Experience operating in classified environments
• Strong understanding of identity, SIEM, cybersecurity, and infrastructure concepts
• Splunk Core certification required
• Splunk IT Service Intelligence (ITSI) certification desired
• Splunk Certified Architect/Consultant preferred
• Experience with, or interest in learning, deploying, and maintaining Splunk SOAR
• Experience with, or interest in learning, deploying, and maintaining Splunk Enterprise Security
• Experience with, or interest in learning, deploying, and maintaining Cribl Stream
• Strong Linux and scripting experience, including Python, Ansible, Terraform, and JSON
• Experience working in a Security Operations Center (SOC)
• Initial understanding of leadership concepts and ideas
• Strong interpersonal skills and ability to work collaboratively in a team
• Ability to clearly communicate complex messages to varied audiences
• Excellent problem-solving skills with keen attention to detail
• Willingness to travel to meet client needs
• Open to government workers and/or candidates with government experience

Demonstrates expertise in implementing and optimizing the Splunk platform for security operations, including developing custom playbooks and reports. Possesses strong knowledge of cybersecurity concepts and experience in classified environments, with a focus on collaboration and problem-solving.

• Splunk Platform Management
• Security Certification (Security+, CISSP)
• Splunk Core Certification
• Linux and Scripting (Python, Ansible, Terraform, JSON)
• Experience in Security Operations Center (SOC)

• Splunk Platform Management
• Custom Playbook Development
• Splunk Report Creation
• Troubleshooting Splunk Instances
• Linux
• Python
• Ansible
• Terraform
• JSON
• Splunk SOAR Deployment

• Interpersonal Skills
• Collaborative Teamwork
• Clear Communication
• Problem-Solving
• Attention to Detail

• TS/SCI with CI Polygraph
• Security+
• CISSP
• Splunk Core Certification
• Splunk IT Service Intelligence (ITSI) Certification

• Classified Environments
• Cybersecurity
• Identity Management
• Infrastructure Concepts
• Government Experience

• Splunk
• Cribl Stream
• SIEM
• Cybersecurity Tools
• Security Operations Center (SOC)