SPLUNK Administrator

Title: SPLUNK Administrator Belong. Connect. Grow. with KBR KBR's National Security Solutions team provides high-end engineering and advanced technology solutions to our customers in the intelligence and national security communities. In this position, your work will have a profound impact on the country's most critical role - protecting our national security. Why Join Us? * Innovative Projects: KBR's work is at the forefront of engineering, logistics, operations, science, program management, mission IT and cybersecurity solutions. * Collaborative Environment: Be part of a dynamic team that thrives on collaboration and innovation, fostering a supportive and intellectually stimulating workplace. * Impactful Work: Your contributions will be pivotal in designing and optimizing defense systems that ensure national security and shape the future of space defense. Key Responsibilities: * Splunk Architect, Splunk Admin. * Implements, tests, and operates advanced software security techniques in compliance with technical reference architecture. * Performs on-going security testing and code review to improve software security. * Troubleshoots and debugs issues that arise. * Provides engineering designs for new software solutions to help mitigate security vulnerabilities. * Contributes to all levels of the architecture and maintains technical documentation. * Consults team members on secure coding practices. Develops a familiarity with new tools and best practices. * Designing, implementing, and maintaining SIEM and SOAR solutions. * Design and implement threat detection, automate incident response processes, integration of various security tools with SIEM and SOAR platforms via APIs * Maintain SIEM applications to collect and aggregate IDS and IPS data from network sensors, raw data from collection agents, firewalls, proxy servers, DLP, antivirus, vulnerability scanner elements, and other security-relevant devices. * Utilize expertise in Splunk "Search" language, Splunk Dashboards, Reports, Lookup Tables, and Summary Indexes. Build Splunk dashboards that take inputs from various data sources such as application logs / operating system logs / middleware logs / network feeds etc. and identify / highlight anomalous activities on the dashboards by their severity levels. * Perform troubleshooting and provide assistance with the creation of Splunk search queries and dashboards. * Experience with designing, implementing, configuring, operating, or testing IT systems or security infrastructure. * Experience building dashboards highlighting the key trends of the data. * Proficiency within a Windows and Linux environment, editing and maintaining Splunk configuration files and apps. * Experience in working in a Splunk clustered environment supporting SOC or NOC environment required. * Experience with virtualization technologies required. Work Environment: * Location: Annapolis Junction MD [On-site] * Travel Requirements: Minimal 0-20% Travel * Working Hours: Standard 40 hour per week Qualifications : Required: * Clearance: Top Secret with SCI * 8 to 10 years experience with BS/BA or 6 to 8 years with MS/MA or 3 to 5 years with PhD. * DoD 8570 Level 3 Certification. Desired: * Experience with importing data in Splunk from various sources: endpoint security, network security (Firewalls, IPS/IDS, DNS, Proxy, etc.), data and application security, cloud security and technologies. * Experience with performing systems administration, including performing installation, configuration, monitoring system performance and availability, upgrades, and troubleshooting of Splunk. Basic Compensation: $150,000 to $160,000 This range is for the Maryland area only The offered rate will be based on the selected candidate's knowledge, skills, abilities and/or experience and in consideration of internal parity. Additional Compensation: KBR may offer bonuses, commissions, or other forms of compensation to certain job titles or levels, per internal policy or contractual designation. Additional compensation may be in the form of a sign on bonus, relocation benefits, short term incentives, long term incentives, or discretionary payments for exceptional performance. Ready to Make a Difference? If you're excited about making a significant impact in the field of space defense and working on projects that matter, we encourage you to apply and join our team at KBR. Let's shape the future together. KBR Benefits KBR offers a selection of competitive lifestyle benefits which could include 401K plan with company match, medical, dental, vision, life insurance, AD&D, flexible spending account, disability, paid time off, or flexible work schedule. We support career advancement through professional training and development. INCLUSION AND DIVERSITY AT KBR At KBR, we are passionate about our people, sustainability, and our Zero Harm culture. These inform all that we do and are at the heart of our commitment to, and ongoing journey toward being a more inclusive and diverse company. That commitment is central to our team of team's philosophy and fosters an environment of real collaboration across cultures and locations. Our individual differences and perspectives bring enhanced value to our teams and help us develop solutions for the most challenging problems. We understand that by embracing those differences and working together, we are more innovative, more resilient, and safer. KBR is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, disability, sex, sexual orientation, gender identity or expression, age, national origin, veteran status, genetic information, union status and/or beliefs, or any other characteristic protected by federal, state, or local law.