The candidate should:

• Support the day-to-day operation of the customer’s Splunk deployment
• Create queries, dashboards, and visualizations in support of customer requirements
• Develop custom functions utilizing REST endpoints and integrating technologies with Splunk
• Create and manage Splunk knowledge objects to include apps, dashboards, alerts, extractions, tags, workflow actions, and aliases
• Develop reports for operational activities
• Creative problem solving, critical thinking, and analytical skills with the ability to de-construct problems

Required Qualifications

• TS/SCI w/ poly
• 5 to 8 years with BS/BA or 3 to 5 years with MS/MA or 0 to 2 years with PhD or equivalent work experience
• Demonstrated Splunk engineering experience
• Understanding of a variety of security tools including firewall logs, intrusion detection systems, windows logs, event management
• Understanding of operating systems (e.g., Linux, Windows, etc)
• Strong analytical skills
• Excellent writing and communication skills
• Key contributor and self-starter with cross-organizational skills that promote transparency, flexibility, and collaboration

Desired Qualifications

• CompTIA Network+ certification
• CompTIA Security+ certification

(2022- 116931)

Posted On: Friday, January 21, 2022