Sr. Splunk Engineer - Active Secret Clearance

Own your career as a Splunk Engineer, Sr at GDIT. Here, you’ll have the opportunity to build strong lines of cyber defense using cutting-edge technologies. Your work in cyber security at GDIT will have an impact on securing our clients’ missions and ensuring we anticipate the threats of tomorrow.

At GDIT, people are our differentiator. As a Splunk Engineer, Sr, you will help ensure today is safe and tomorrow is smarter. Our work depends on a Splunk Engineer, Sr joining our team to provide critical support to the architecture, deployment, and maintenance of Splunk environments that support essential federal clients. The Splunk Engineer, Sr will work as part of a diverse, high-octane security team to conceptualize, design, deploy, test, manage, and maintain Splunk solutions while providing data analytics and analysis on operations to internal and external stakeholders at all levels.

If you are interested in a challenging, rewarding opportunity to safeguard vital infrastructure and grow your career with a company that values its people as our greatest asset, then this is the role for you!  

HOW A SPLUNK ENGINEER, SR WILL MAKE AN IMPACT

• Conceptualizes, designs, implements, and maintains Splunk infrastructure solutions.
• Supports systems integration efforts involving hardware, software, operating system and communications interoperability, and maintenance of the Splunk Environment.
• Manages distributed deployment architecture, index clusters, and search head clusters.
• Provides design, development, and implementation support.
• Develops dashboards, reports, and complex custom queries.
• Creates and manages Splunk knowledge objects.
• Provides technical design, programming, testing, and implementation support for operating, communications, and hardware systems integration of Splunk data.
• Normalizes disparate data sets, integrating multiple data streams and feeds from networks and infrastructure services, into near real-time dashboards for use in analysis.
• Prepares specifications, code, system tests, indexers, forwarders and documentation in accordance with standards and requirements specifications.
• Works closely with all relevant stakeholders to solve technical problems at the network, system, and application levels.
• Maintains a current understanding of the best practices and strategies used in cyber security.
• Motivates self and co-workers to expand knowledge base and capabilities.
• May support installation of physical and software components.
• May supervise other engineers or technicians on assigned work.
• Execute integration of SOC technologies including incorporating subordinate agency search, indexing, and collection tiers for consolidation efforts.
• Optimize system performance through automations and fine-tuning functionality.

WHAT YOU’LL NEED TO SUCCEED
 

Education: Bachelor of Arts/Bachelor of Science in Cyber Security, Information Technology, Computer Science, or a related field. Degree may be substituted for by 4 years of additional experience in related field.
 

Required Experience: 8+ years of experience in cyber security or related field with degree; 12+ years of experience in cyber security or related field without degree.
 

Required Technical Skills:

• Splunk Enterprise, Security, SOAR, UBA, AA, ARI, SOC, ITSI, and/or AD
• Design, implementation, and maintenance of Splunk infrastructure.
• Multi-tenant Splunk Architecture Management.
• Interoperability and maintenance of Splunk environments.
• Firm grasp of role based access control
• Proficiency in recognizing and onboarding new data sources into Splunk, including understanding different data formats and parsing techniques
• Distributed deployment of Splunk architecture, index clusters, and search head clusters.
• Mastery of SPL for effective searching, filtering, and analysis of data within Splunk.
• Experience with scripting languages like Python or PowerShell to automate tasks, enhance data analysis, and integrate Splunk with other systems.
• Understanding of API calls and web services for integration and data exchange with other systems.
• Experience with AWS, especially in the context of deploying and managing Splunk.
• Creation and maintenance of Splunk dashboards.
• Creation and management of Splunk knowledge objects.
• Installation and support of hardware and software components.
• Preparation, support, and improvement of technical documentation and design.

Security Clearance Level: Must possess active Secret or higher clearance.

Required Skills and Abilities:

• Proven analytical and problem-solving skills.
• Excellent communication skills.
• Ability to liaise with internal and external stakeholders at all levels.
• Capability to supervise other engineers and/or technicians.

Location: On customer site in Washington, D.C.
 

US Citizenship Required

GDIT IS YOUR PLACE

• Full-flex work week to own your priorities at work and at home
• 401K with company match
• Comprehensive health and wellness packages
• Internal mobility team dedicated to helping you own your career
• Professional growth opportunities including paid education and certifications
• Cutting-edge technology you can learn from
• Rest and recharge with paid vacation and holidays