Design and implement Splunk Enterprise Security for large-scal enterprise network environment
Provide O&M support of large Cribl Deployment
Develop custom Splunk apps, dashboards, and reports to enhance security visibility
Create and optimize complex SPL queries for threat detection and security analytics
Integrate Splunk with other security tools to build a comprehensive security monitoring ecosystem
Design and maintain Splunk data models to support security use cases and compliance reporting
Develop custom threat detection rules and correlation searches in Splunk
Configure and tune Splunk alerts to reduce false positives and enhance detection efficacy
Support compliance reporting for FISMA, RMF, and other federal requirements
Provide technical expertise during security incidents and coordinate response activities

Requirements

Bachelor's degree in Cybersecurity, Information Security, or related field
7+ years of security engineering experience with 3+ years of advanced Splunk implementation
Splunk Certified Architect or Splunk Certified Enterprise Security Admin certification
Experience designing and implementing Splunk Enterprise Security in large environments, along with Cribl
Strong knowledge of SPL query language and advanced search techniques
Experience creating custom Splunk dashboards, reports, and visualizations
Demonstrated expertise in security monitoring and SIEM technology
Experience implementing security controls per NIST SP 800-53 requirements
Proficiency with Splunk administration and performance tuning

Benefits

401(k), including an employer match of 100% of the first 3% contributed and 50% of the next 2% contributed
Medical, Dental, and Vision Insurance (available on the 1st day of the month following your first day of employment)
Group Term Life, Short-Term Disability, Long-Term Disability
Voluntary Life, Hospital Indemnity, Accident, and/or Critical Illness
Participation in the Discretionary Time Off (DTO) Program
11 Paid Holidays Annually

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

Splunk Enterprise SecuritySPL query languagesecurity monitoringSIEM technologyCriblcustom Splunk appsdashboardsreportsthreat detectionperformance tuning

Certifications

Splunk Certified ArchitectSplunk Certified Enterprise Security Admin