Job Requirements
San Antonio, TX
Top Secret/SCI Polygraph not specified
Early Career (2+ yrs experience)
$130,000 - $170,000
Job Description
Splunk Engineer (X2 openings)
Onsite- Joint Base San Antonio
Clearance: TS/SCI
A Splunk Engineer is an individual who can operate independently and will be entrusted with delivering success for customers to achieve predetermined goals aligned with a statement of work. To be successful in this role, you will be expected to specialize in a capability aligned with service practices while also contemplating which future opportunities they would like to explore. They will be expected to execute all tasks provided in a statement of work in a timely fashion and to communicate any unexpected complexities that may arise to senior leadership. Excellent communication skills are essential for this role, as these individuals will interact with clients regularly.
How you'll make an impact
• Maintain a master’s understanding of the chief technologies they will be responsible for.
• Have an advanced understanding of major technologies that will surround the chief technology in their environment.
Engagement Management
• Execute all tasks outlined in the scope of work and follow standard operating procedures with no direct oversight.
• Provide assistance for detailed view of notable events, workbook for open investigations, and risk analysis scoring system.
• Assist and recommend actions in security operations center tier I and tier II incident response incidents.
• Assist in ES tuning performance by editing, creating search language of searches to modify and reduce number of notables and removal of low value searches. Assist in configuration of correlation searches, dashboard searches, risk modifiers, threat intelligence feeds, workflow actions and Enterprise Security content.
• Automate issue resolution and compliance reporting to lower time on detection, time on mitigation for security organizations.
• Integrate Splunk Mission Control, Splunk Security Orchestration, Automation Response (SOAR), and/or other customer approved security product applications utilizing Enterprise Security.
• Utilize data thresholds, trend-based conditions and behavioral pattern recognition.
Client Engagement
• Develop and maintain strong relationships with clients to ensure satisfaction.
• Adhere to availability standards for responding to client inquiries.
• Lead the communication of technical concepts effectively to clients.
• Identify and communicate cross-sell and up-sell opportunities with the account team across services.
What we're looking for
• Active TS/SCI clearance required.
• Splunk Certification Preferred.
• Experience with, or interest in, learning, deploying, and maintaining Splunk SOAR.
• Experience with, or interest in, learning, deploying, and maintaining Cribl.
• Experience operating in classified environments.
• Robust understanding of identity, SIEM, cybersecurity, and infrastructure concepts.
• Ability to troubleshoot Splunk instances.
• Create custom Splunk reports, dashboards, and content per customer requirements.
• Strong interpersonal skills and ability to work collaboratively in a team.
• Ability to clearly communicate complex messages to a variety of audiences.
• Excellent problem-solving skills with a keen attention to detail.
Onsite- Joint Base San Antonio
Clearance: TS/SCI
A Splunk Engineer is an individual who can operate independently and will be entrusted with delivering success for customers to achieve predetermined goals aligned with a statement of work. To be successful in this role, you will be expected to specialize in a capability aligned with service practices while also contemplating which future opportunities they would like to explore. They will be expected to execute all tasks provided in a statement of work in a timely fashion and to communicate any unexpected complexities that may arise to senior leadership. Excellent communication skills are essential for this role, as these individuals will interact with clients regularly.
How you'll make an impact
• Maintain a master’s understanding of the chief technologies they will be responsible for.
• Have an advanced understanding of major technologies that will surround the chief technology in their environment.
Engagement Management
• Execute all tasks outlined in the scope of work and follow standard operating procedures with no direct oversight.
• Provide assistance for detailed view of notable events, workbook for open investigations, and risk analysis scoring system.
• Assist and recommend actions in security operations center tier I and tier II incident response incidents.
• Assist in ES tuning performance by editing, creating search language of searches to modify and reduce number of notables and removal of low value searches. Assist in configuration of correlation searches, dashboard searches, risk modifiers, threat intelligence feeds, workflow actions and Enterprise Security content.
• Automate issue resolution and compliance reporting to lower time on detection, time on mitigation for security organizations.
• Integrate Splunk Mission Control, Splunk Security Orchestration, Automation Response (SOAR), and/or other customer approved security product applications utilizing Enterprise Security.
• Utilize data thresholds, trend-based conditions and behavioral pattern recognition.
Client Engagement
• Develop and maintain strong relationships with clients to ensure satisfaction.
• Adhere to availability standards for responding to client inquiries.
• Lead the communication of technical concepts effectively to clients.
• Identify and communicate cross-sell and up-sell opportunities with the account team across services.
What we're looking for
• Active TS/SCI clearance required.
• Splunk Certification Preferred.
• Experience with, or interest in, learning, deploying, and maintaining Splunk SOAR.
• Experience with, or interest in, learning, deploying, and maintaining Cribl.
• Experience operating in classified environments.
• Robust understanding of identity, SIEM, cybersecurity, and infrastructure concepts.
• Ability to troubleshoot Splunk instances.
• Create custom Splunk reports, dashboards, and content per customer requirements.
• Strong interpersonal skills and ability to work collaboratively in a team.
• Ability to clearly communicate complex messages to a variety of audiences.
• Excellent problem-solving skills with a keen attention to detail.
group id: 10529568