General Dynamics Information Technology

Splunk Cyber Security Architect/Engineer

General Dynamics Information Technology

full-time

Posted on:

Origin:  • 🇺🇸 United States

Visit company website
✨ AI Apply
Manual Apply

Salary

💰 $144,410 - $195,378 per year

Job Level

SeniorLead

Tech Stack

AWSAzureCloudCyber SecurityGoogle Cloud PlatformJavaScriptLinuxPythonSplunkSQLUnix

About the role

  • Designing, deploying, and maintaining on-premises and cloud-based Splunk environments to support enterprise-level monitoring, alerting, and reporting.\n
  • Deep expertise in Splunk system architecture, design, implementation, configuration and operational support in a hybrid on-prem Unix/Linux and cloud-based environment.\n
  • Collaborate across DevOps, Security, and IT teams to optimize performance, ensure data integrity, system availability and support mission-critical operations.\n
  • Proven hands-on experience with a large enterprise wide Splunk environment is mandatory.\n
  • Off-hours and weekend efforts for systems maintenance, upgrades and support may be required from time to time.\n
  • Self-starter with a service-oriented mindset who will take action, find ways to solve problems, and move projects to conclusion independently.\n
  • Strong problem-solving skills and the ability to translate research insights into practical solutions that address real-world challenges.\n
  • Strong communication and collaboration skills with the ability to articulate complex technical concepts to both technical and non-technical audiences.\n
  • Experience in mentoring and guiding junior researchers or team members.\n
  • Ability to leverage the Splunk AI Assistant and other AI tools to increase accuracy and efficiency of task and other deliverables.\n
  • Advanced knowledge of Unix/Linux and/or Windows systems administration and troubleshooting.\n
  • Strong scripting skills in Bash, Python, JavaScript, SQL and PowerShell for automation and integration tasks.\n
  • Experience with Splunk upgrades, patching, and performance tuning & integrating Splunk with cloud platforms (AWS, GCP, Azure).\n
  • Understanding of security and compliance requirements and implementation of role-based access controls (RBAC) in Splunk.\n
  • Extensive knowledge of defense-in-depth principles, Network and Security architecture, network topology, IT device integrity, and common security elements.\n
  • Executes new projects as well as data and user onboarding.\n
  • Strong understanding of IT and Cyber industry standards and technologies to include such controls governed by NIST, FISMA, and FedRamp.\n
  • Experience installing and utilizing and developing with the Splunk App for Data Science and Deep Learning and Splunk SOAR Automation toolset.

Requirements

  • Education: Bachelor\'s Degree in Computer Science or related technical discipline; preferred but not required. NOTE: If resources do not have a relevant college degree, an additional 4 years of relevant work experience is required.\n
  • 10+ Years of Splunk Experience Required\n
  • Proficiency in writing complex Splunk queries, dashboards, and alerts using SPL\n
  • Experience with REST APIs for Splunk and external system integration\n
  • Advanced knowledge of Unix/Linux and/or Windows systems administration and troubleshooting\n
  • Strong scripting skills in Bash, Python, JavaScript, SQL and PowerShell for automation and integration tasks\n
  • Experience with Splunk upgrades, patching, and performance tuning\n
  • Experience with Splunk App for Data Science and Deep Learning.\n
  • Experience installing and utilizing and developing with the Splunk SOAR Automation toolset\n
  • Security clearance: Ability to obtain and maintain a Public Trust clearance and background screening