SIEM Engineer/Splunk Certified Admin
2 weeks ago
Category: SIEM (Security Information and Event Management) Engineer / Splunk Certified Admin
Travel Required: No
Remote Type: No
Clearance: Top Secret/SCI w/ FS Polygraph (last poly must be within the past 7 years) Job Summary / Primary Responsibilities The selected candidate will be responsible for configuring the collection, parsing, correlation, and visualization of events for a critical operational system. She/he will demonstrate strong skills in system administration, log management, event correlation, and threat detection and will support building and maintaining a system that analyzes collected data and derives facts, inferences, and projections to determine if the systems being monitored are operating normally. The individual will work on a team responsible for configuring the systems which support analysts and end-users. The successful candidate will support the collection and extraction of data used to refine existing and new reports, analytics, and dashboards, and will be involved with the drafting and creation of reports and dashboards based on end-user requirements. She/he will also support the integration of resources across teams to better define the audit data being collected to eliminate false positives and false negatives from the data. Basic/Required Qualifications * At least 8 years of related experience.
• At least 2 years of experience with one or more of the following: StealthWatch, TripWire, Zenoss, ArcSight, Splunk.
• Experience in design, implementation, and support of Splunk core components, including: indexers, forwarders, search heads, and cluster managers.
• Experience with configuration and administration of Splunk ingestion and forwarding for new and existing applications and data.
• Experience with troubleshooting Splunk dataflow issues between the various Splunk core components.
• Experience configuring and deploying data collection for a variety of operating systems and networking platforms.
• Experience creating Dashboards and Analytics within SIEM tools.
• Experience working with monitoring systems supporting auditing, incident response, and system health.
• Understanding of networking components and devices, ports, protocols, and basic networking troubleshooting steps.
• The ability to troubleshoot issues with log feeds, search time, and field extractions.
• The ability to troubleshoot problems related to data solutions. Preferred Qualifications
• Bachelor's Degree in Computer Science, Engineering, Information Assurance, or a related discipline.
• Network Security Operations Center (SOC) experience.
• Experience and talent in data visualization.
• Experience creating workflows for Incident Response within a SIEM Tool.
• Security+ Certification.
• GIAC Certified Incident Handler Certification.
• GIAC Cyber Threat Intelligence Certification.
• Cybersecurity certifications.
• Formal SIEM training.
• Experience working on an Agile team/program.
-
SIEM Engineer/Splunk Certified Admin
3 weeks ago
Annapolis Junction, United States Sunayu, LLC Full timeLocation: Annapolis Jct, MDCategory: SIEM (Security Information and Event Management) Engineer / Splunk Certified AdminTravel Required: NoRemote Type: NoClearance: Top Secret/SCI w/ FS Polygraph (last poly must be within the past 7 years) Job Summary / Primary Responsibilities The selected candidate will be responsible for configuring the collection,...
-
Splunk Administrator
7 days ago
Annapolis Junction, MD, United States Leidos Full timeDescription The Program is looking for a SIEM (Security Information and Event Management) Engineer / Splunk Certified Admin to join a high performing agile team using the Scaled Agile Framework (SAFe) methodology to support a large, complex, and fast-paced program. Program execution follows DEVOPS best practices and employs robust development, test, and...
-
Splunk Administrator
2 weeks ago
Annapolis Junction, MD, United States Leidos Inc Full timeDescription The Program is looking for a SIEM (Security Information and Event Management) Engineer / Splunk Certified Admin to join a high performing agile team using the Scaled Agile Framework (SAFe) methodology to support a large, complex, and fast-paced program. Program execution follows DEVOPS best practices and employs robust development, test, and...
-
SIEM Engineer/Splunk Certified Admin
1 week ago
Annapolis, United States SUNAYU Full timeLocation: Annapolis Jct, MD Category: SIEM (Security Information and Event Management) Engineer / Splunk Certified Admin Travel Required: No Remote Type: No Clearance: Top Secret/SCI w/ FS Polygraph (last poly must be within the past 7 years) Job Summary / Primary Responsibilities The selected candidate will be responsible for configuring the collection,...
-
SIEM Engineer/Splunk Certified Admin
14 hours ago
Annapolis, United States SUNAYU Full timeLocation: Annapolis Jct, MD Category: SIEM (Security Information and Event Management) Engineer / Splunk Certified Admin Travel Required: No Remote Type: No Clearance: Top Secret/SCI w/ FS Polygraph (last poly must be within the past 7 years) Job Summary / Primary Responsibilities The selected candidate will be responsible for configuring the collection,...
-
Annapolis Jct, United States Momentum Engineering Full timeRequired QualificationMust have Splunk Enterprise Certified Admin Certificate or higher. The selected candidate will be responsible for configuring the collection, parsing, correlation, and visualization of events for a critical operational system. The candidate will demonstrate strong skills in system administration, log management, event correlation, and...
-
Splunk Administrator
2 weeks ago
Annapolis Junction, United States Leidos Full timeR-00134786 Description The Program is looking for a SIEM (Security Information and Event Management) Engineer / Splunk Certified Admin to join a high performing agile team using the Scaled Agile Framework (SAFe) methodology to support a large, complex, and fast-paced program. Program execution follows DEVOPS best practices and employs robust development,...
-
Annapolis Junction, MD, United States Leidos Full timeDescription Destination...Leidos! Come join our exciting and fast-growing National Security Group! Why? Because we offer competitive salaries, bonus programs, competitive paid leave, holidays, beyond ordinary benefits, and many opportunities for continual professional growth and development, including a robust technical upskilling program, paid/sponsored...
-
Annapolis Junction, United States Leidos Full timeR-00133931 Description Destination...Leidos! Come join our exciting and fast-growing National Security Group! Why? Because w e offer competitive salaries, bonus programs, competitive paid leave, holidays, beyond ordinary benefits, and many opportunities for continual professional growth and development, including a robust technical upskilling program,...
-
Annapolis Junction, Maryland, United States BAE Systems Full timeJob Description The selected candidate will join a high performing agile team that uses the Scaled Agile Framework (SAFe) methodology to support a nationally significant and fast-paced program. Program execution follows DEVOPS best practices and employs robust development, test and production environments. Test Driven Development (TDD) and test automation...
-
Splunk Engineer with Security Clearance
4 weeks ago
Ashburn, VA, United States Anonymous Employer Full timeThe candidate should have experience deploying and configuring Universal Forwarders and possess demonstrable knowledge of data collection methods such as Syslog, JDBC, or APIThis position requires solid experience developing Splunk search queries, and dashboards and reportsNice to have skills include Unix administration, scripting, understanding of Federal...
-
Linthicum Heights, MD, United States Farfield Systems, Inc Full timeAbout Farfield Systems, Inc At Farfield we are committed to delivering trusted expertise to our government clientsAs we grow, our focus is on increasing opportunities for you to grow with us while still delivering the same excellence customers have grown to expect from usWe continually evaluate our environment to provide a place where your career is packed...
-
Splunk Engineer
1 week ago
Annapolis Junction, United States Global Channel Management Full timeSplunk Engineer needs 6+ years of experience Splunk Engineer requires: Top secret/SCI clearance with at least a CI polygraph. Splunk engineering experience Splunk Engineer duties: Establish a process to formally and proactively control and manage changes to requirements, consider impacts prior to commitment to change, gain stakeholder buy-in, eliminate...
-
Splunk Engineer
13 hours ago
Annapolis Junction, United States Global Channel Management Full timeSplunk Engineer needs 6+ years of experience Splunk Engineer requires: Top secret/SCI clearance with at least a CI polygraph. Splunk engineering experience Splunk Engineer duties: Establish a process to formally and proactively control and manage changes to requirements, consider impacts prior to commitment to change, gain stakeholder buy-in, eliminate...
-
Sr. Splunk Software Engineer
3 weeks ago
Annapolis Junction, United States Columbia Technology Partners Full timeJob DescriptionJob DescriptionDescription:The Senior Splunk Software Engineer (SWE) shall demonstrate the following skills:Design and develop software solutions by analyzing stakeholder requirements and conferring with users or system engineersDesign and implement software solutions to complex problemsDevelop software system installation or build procedures...
-
Splunk Engineer
4 days ago
Annapolis Junction, United States Bright Vision Technologies Full timeJob DescriptionJob DescriptionJob Title: Splunk EngineerJob Location: Annapolis Junction, MDWork Schedule: 4/10 work schedule, Monday-ThursdayJob Type: Onsite, Full-TimeJob DescriptionMUST HAVES: 6+ years of experience is required Candidates must have Top Secret/SCI Clearance with a Full Scope Polygraph.The Splunk engineer is expected to use Splunk...
-
Splunk Engineer
2 weeks ago
Arlington, VA, United States Leidos Inc Full timeDescription Leidos has an immediate need for a Splunk Engineer for a new customer on a highly-visible and strategicCybersecurity Task Order. The Splunk Engineer will install and maintain Splunk infrastructure, gatherrequirements from customers, onboard data, and assist end users with searches, dashboards, reports, and knowledgeobjects. The Splunk Engineer...
-
Annapolis Junction, United States BAE Systems Full timeJob Description The selected candidate will join a high performing agile team that uses the Scaled Agile Framework (SAFe) methodology to support a nationally significant and fast-paced program. Program execution follows DEVOPS best practices and employs robust development, test and production environments. Test Driven Development (TDD) and test automation...
-
Annapolis Junction, United States Columbia Technology Partners Full timeDescription: The Senior Splunk Software Engineer (SWE) shall demonstrate the following skills: * Design and develop software solutions by analyzing stakeholder requirements and conferring with users or system engineers * Design and implement software solutions to complex problems * Develop software system installation or build procedures or scripts * Analyze...
-
Splunk Engineer
3 weeks ago
Annapolis Junction, Maryland, United States Global Channel Management, Inc Full timeSplunk Engineer needs 6+ years of experience Splunk Engineer requires: Top secret/SCI clearance with at least a CI polygraph. Splunk engineering experience Splunk Engineer duties: Establish a process to formally and proactively control and manage changes to requirements, consider impacts prior to commitment to change, gain stakeholder buy-in, eliminate...
