Senior Splunk Engineer (CBP)

Company: Wits Solutions Inc
Location: Alexandria
Posted on: September 13, 2020

Job Description:

Senior Splunk Engineer (CBP)

Shift: Regular Days (non-shift work)

Work location: Alexandria VA

Must Have One of the Following J3 Certifications

CompTIA Advanced Security Practitioner (CASP)

GCIH – Incident Handler

GCWN – Windows Security Administrator

GISF – Security Fundamentals

GISP – Security Professional

GSSP – Secure Software Programmer

GICSP –Cyber Security Professional

GSSP – Secure Software Programmer

SEI (Software Engineering Institute)

CCSP – Certified Cloud Security Professional

CISSP – Certified Information Systems Security

CSSLP – Certified Secure Software Lifecycle Professional

SSCP – Systems Security Certified Practitioner

CCNP

CCNP Security

CCIE Security

CEH – Certified Ethical Hacker

ECSP – EC-Council Certified Secure Programmer

MCSE – Microsoft Certified Solutions Expert (Server)

RHCA

RHCE

VCA (Certified Associate)

VCP (Certified Professional)

VCAP (Certified Advanced Professional)

VCIX (Implementation Expert)

VCDX (Certified Design Expert)

Converged Infrastructure Specialist

Certified Implementation Engineer Specialist

Certified Data Administrator Professional

Certified Storage Associate

Certified Splunk Architect

Primary Responsibilities:

· The selected candidate will provide overall engineering, and administration in supporting a very large distributed clustered Splunk environment consisting of search heads, indexers, deployers, deployment servers, heavy/universal forwarders and Splunk Enterprise Security premuim app, spanning security, performance, and operational roles.

· The candidate should be familiar with recognizing and onboarding new data sources into Splunk, analyzing the data for anomalies and trends, and building dashboards highlighting the key trends of the data. The Splunk engineer should be familiar with a Linux environment, editing and maintaining Splunk configuration files and apps.

· The Splunk engineer will work with other Cybersecurity Engineering team members and will be required to interact with end users to gather requirements, perform troubleshooting, and provide assistance with the creation of Splunk search queries and dashboards. The Splunk engineer will be required interact with senior management, as necessary.

· Knowledge of Cloud Services such as AWS, Azure, Office365

· Ability to script in one more of the following computer languages Python, Bash, Visual Basic or Powershell.

Basic Qualification

Minimum of a Bachelor’s degree coupled with 7+ years’ experience in the Information Technology arena.

· 4+ years of experience in a senior Splunk role working in a Splunk clustered environment supporting SOC or NOC environments

· 3+ Years experience in Linux and SQL/ODBC interfaces

· 2+ Years experience in app interface development, using REST API’s

· Previous project management experience.

· ITIL Change & Configuration Management

· Experience with Ansible and GIT

Must have an active Secret Clearance and in addition, must have a current or be able to favorably pass a 5 year (BI) Background Investigation to join this program.

· A minimum of a Bachelor’s degree coupled with 7+ years of experience in the Information Technology arena.

· 4+ years of experience in a senior Splunk role working in a Splunk clustered environment supporting SOC or NOC environments

· 3+ Years of experience in Linux and SQL/ODBC interfaces

· 2+ Years of experience in app interface development, using REST APIs

· Previous project management experience.

· Ability to follow Change & Configuration Management

· Strong problem solving abilities with an analytic and qualitative eye for reasoning under pressure

· Self-starter with the ability to independently prioritize and complete multiple tasks with little to no supervision

· Knowledge of Cloud Services such as AWS, Azure, Office365

· Ability to script in one more of the following computer languages Python, Bash, Visual Basic or Powershell

· Splunk Certified Architect Certification

· Splunk Certified Administrator Certification

- Experience in automating Splunk Deployments

· Must have an active Secret Clearance and in addition, must have a current or be able to favorably pass a 5 year (BI) Background Investigation to join this program.

Preferred Qualification

· Experience in SQL

· Experience in other systems and network management products.

· Current or former completed Splunk training

· Prior experience a in Splunk professional services role

· Automation/orchestration of Splunk with in a Cloud environment

Keywords: Wits Solutions Inc, Alexandria , Senior Splunk Engineer (CBP), Other , Alexandria, Virginia