Splunk Engineer/SME with Security Clearance

3 weeks ago


Washing, United States Base One Technologies Full time

Our DC metro based client is looking for a  Senior Splunk Engineer. If you are interested in this position. Please send your updated resume in word format to Have One of the Following J3 CertificationsSANS: GCWN - Windows Security Administrator, GISF - Security Fundamentals, GSSP - Secure Software Programmer, GICSP - Cyber Security ProfessionalCarnegie Mellon University: SEI (Software Engineering Institute)ISC2: CCSP - Certified Cloud Security Professional, CISSP - Certified Information Systems Security, CSSLP - Certified Secure Software Lifecycle Professional, SSCP - Systems Security Certified PractitionerCISCO: CCNP, CCIE SecurityEC-Council: ECSP - EC-Council certified Secure ProgrammerMicrosoft: MCSE - Microsoft Certified Solutions ExpertRedHat: RHCA, RHCEVMWare: VCA (Certified Associate), VCP (Certified Professional), VCAP (Certified Advanced Professional), VCIX (Implementation Expert), VCDX (Certified Design Expert)NetApps: Converged Infrastructure Specialist, Certified Implementation Engineer Specialist, Certified Data Administrator Professional, Certified Storage AssociatePrimary ResponsibilitiesOur client is seeking a talented Systems Engineer SME to join our team to support a federal customer within the Enterprise Security Operations Center (ESOC). The Splunk Systems Engineer role provides support across a progressing agile team environment focused on supporting the ESOC Operations mission. The Splunk engineer will support the full system engineering life-cycle, including requirements analysis, design, development, integration, test, documentation, and implementation following defined best practices and operational workflows. This role will engage in infrastructure solution design and architecture, information assurance, advisory, compliance, and risk management support. The skills outlined below will be used across the enterprise in supporting all divisions and missions and not necessarily specific to the Splunk platform but will sometimes be general infrastructure engineering or support tasks within the same mission space.Build, implement and administer Splunk in Windows and Linux environments.Assist in the technical design process, and provide guidance/direction to the customer on how to best get value from Splunk products.Establish and maintain configuration control and provide technical support.Perform data ingestion and visualization for Splunk.On-board new data sources into Splunk, analyze the data for anomalies and trends, and build dashboards highlighting the key trends of the data.Design, develop, recommend and implement Splunk dashboards and alerts to support the ESOC Operations team.Perform integration activities to connect with 3rd party software APIs.Work with stakeholders to develop requirements and deliverables.Manage automating Splunk deployments and orchestration within a Cloud environment.Basic QualificationSplunk Enterprise Certified ArchitectExtensive experience implementing, architecting and administering Splunk and Splunk Enterprise Security SuiteExperience writing Splunk queries in Splunk Programming Language (SPL)Experience developing in XML, Bash, JavaScript and Python, Perl, PowerShell scriptsExtensive experience with two of SQL, MySQL, or OracleExperience administering Linux OS, particularly RedHat EnterpriseDepartment of Homeland Security ESOC employees are required to obtain an Entry on Duty (EOD) clearance to support this program.Required Education/Experience     BS degree in Science, Technology, Engineering, Math or related field and 12 – 15 years of prior relevant experience with a focus on cyber security or Masters with 10 – 13 years of prior relevant experience. Preferred Qualification            Experience working in an Agile environment.Extensive experience working in AWSExperience developing in HTML, CSS