Splunk Engineer

2 months ago


Durham, United States TEKsystems Full time
Job DescriptionJob Description

Job Title: Splunk Engineer

Type:18-month contract to hire

Worksite Address: On-site in the RTP Area

Requirements: Splunk experience; Linux experience; U.S. Citizen

Description

This position is for a team with our client that was created in the aftermath of 9/11 to deliver rapid-response technical support to the U.S. Federal Government.

The Splunk Engineer will work on the IT Operations Team that supports a new service offering for the government. This team is responsible for taking care of the internal needs from an IT standpoint. The demands of the role have increased, resulting in the need for an additional Splunk administrator. This position will go perm within 18 months.

The Splunk engineer will continue to maintain the health of the environment, create dashboards, and provide support to the business units when they have additional requirements. This candidate will need to be proficient in using Splunk as a primary log for devices as well as assist the security team to ensure security requirements are met. For example, this person will need to create a special dashboard, know how to gather requirements from business owners for that dashboard and communicate back and forth with that team. Other responsibilities within this role consist of: making adjustments as people send logs, run queries, and explain applications that are in Splunk. This person will not be responsible for completely configuring the applications, however. This person will likely be more seasoned with a lot of problem-solving skills, with the ability to think outside of the box. Having experience with Splunk in a virtualized environment will be helpful.

The ideal candidate for this role is a seasoned/experienced Splunk SME who has vast experience running Splunk as a SIEM, in a government organization. Experience with large-scale deployments with data feeds from multiple on premise data centers will be important.

More specifically, the successful candidate will have experience with the following:

  • Expertise in Enterprise security and developing Splunk ES correlation searches and to identify and address emerging security threats through the use of continuous monitoring, alerting and analytics.
  • Installation, configuration & administration of Splunk Enterprise Server and Splunk Universal Forwarder, Splunk Heavy Forwarders in large distributed environment.
  • Sound Knowledge in using Splunk knowledge objects.
  • Sound knowledge in using configuration files (inputs, outputs, web.conf, serverclass.conf, server.conf...etc.).
  • Experience in roles creation and user authentication.
  • Hands-on Experience using the syslog servers.
  • Develop custom visualizations dashboards, data models, reports, alerts.
  • Ability to write complex search queries and should have expertise in search optimizations and troubleshooting.
  • Expertise in Splunk cluster Administration (Search Head cluster, Indexer Cluster and Distributed Management Console) including version upgrades, permissions, and audit compliance

 

Top Skills:
1) Splunk Administrator (5+ years): Installation, Configuration, Management, care and feeding,
2) Experience on-boarding data, creating dashboards, setting and managing alerts, and writing Splunk applications
3) Experience in a clustered Splunk environment as well as Splunk enterprise security
4) Knowledge and experience of Linux Administration

Preferred one or more of the following:
Splunk Certified Administrator
Splunk Certified Architect

Additional Qualifications
· Minimum 4+ year’s Hands-on experience with SPLUNK in one of the following areas: IT Operations, compliance, dev ops, network security, and system security, supporting security event management tools (SIEMs) Minimum 2+ years Hands-on experience with rule and advanced logic creation within SPLUNK.
· Experience with integrating solutions in a multi-vendor environment, including SaaS environments.
· Knowledge of enterprise logging, with a focus on security event logging.
· Strong Knowledge on regular expressions.
· Experience with enterprise-scale operations and maintenance environments.
· Experience with Python and Shell scripting and ability to automate tasks and manipulate data.
· Experience with Windows and \*NIX environments.
· Experience with Java script, HTML, CSS and XML.
· Experience with various security tools, including Wire shark, Nessus, Nmap, Burp, Proxy, or Snort a plus.
· Strong analytical and creative problem-solving skills.
· Ability to multitask and solve complex technical problems.
· Monitor and maintain Splunk performance, availability, and capacity.
· Create and maintain documentation related to architecture and operational processes for Splunk.
· Engage application and infrastructure teams to establish best practices for utilizing Splunk data and visualizations.


Day in the life:
1) Health check: make sure log rotations working correctly, test environment set up
2) Auditing recently
3) Analyzing with soc analysts, tune data that comes in, parsing out what needs to be filtered/what does not.
4) Work with infrastructure engineers
configuring alerts

 

Benefits:

This is an opportunity for someone to get a clearance, or potentially upgrade an existing clearance level. This is also a very collaborative environment, which allows for the individual to gain experience in other technologies such UC and Security. In addition, this opportunity provides an opportunity to work with an enterprise, industry leading company with access to their Labs for certification studying and access to industry leading technology.

FTE Benefits:
1) Annual bonus between 10-15% of pay band.
2) Client paid CCIE test up to 3 times.
3) 11K annual bonus for CCIE cert
4) Additional annual bonus for clearance.
5) $28K annual health benefits package
6) $4K contribution to HSA

 

Work Environment

Cubicle setting. This is a casual environment, shorts and jeans are acceptable, The shift is around core hours (8-5) with flexibility. This team has created a collaborative environment. He/She needs to be able to work well in a team environment, help out other as much as possible, even if it's in another technology.

 

Additional Skills & Qualifications

Sole US Citizen
5 years’ experience with Splunk
Experience onboarding data and doing dashboards
Experience creating alerts
Experience writing Splunk Apps
Knowledge and experience of Linux Administration
Experience in a clustered Splunk environment
Experience with Splunk enterprise security

 

Impact to the Internal/External Customer

For our client to provide additional services to its external customers (DoD, FBI, etc), they must have an internal infrastructure that supports it. The IT Ops team is standing up a new service that will be essential for their peers in delivering top qualify to their external clients. Splunk is at the core of that service due to its monitoring capabilities.

 

Business Challenge

If this team cannot provide the necessary support to their customers, they will to somewhere else for the service, impacting our client's brand and revenue streams. Standing up this new service where Splunk is part of it is essential to ensuring our client can continue to deliver to its customers.

 



  • Durham, North Carolina, United States Fidelity TalentSource LLC Full time

    About the RoleWe are seeking a skilled Senior Software Engineer to join our team at Fidelity TalentSource LLC. As a Senior Software Engineer, you will be responsible for designing and developing software solutions that meet the critical business needs of our organization. You will work closely with project managers, systems analysts, offshore resources, tech...

  • Security Engineer

    2 months ago


    Durham, United States TEKsystems Full time

    Job DescriptionJob Description 3170633**U.S. Citizens**Top Three Skills:1) Vulnerability Management experience 2) Familiarity with setting up and configuring Security Center, Nessus, and Tenable (or even ACAS) 3) Experience running scans and using the reporting to provide corrective action and/or remediation. 4) Secret Clearance Job Description: This...


  • durham, United States Compunnel Inc. Full time

    Job Title: Software Engineer in Test (Rest Assured)Duration: Long TermLocation: Durham, NC(Hybrid)Must Have: - Java/ Rest Assured and Postman - Looking for someone with API automation testing skills AND some knowledge/ability to develop in Java The Expertise You Have and Skills You BringBachelors in Computer Science RequiredDemonstrated testing and...


  • durham, United States Compunnel Inc. Full time

    Job Title: Software Engineer in Test (Rest Assured)Duration: Long TermLocation: Durham, NC(Hybrid)Must Have: - Java/ Rest Assured and Postman - Looking for someone with API automation testing skills AND some knowledge/ability to develop in Java The Expertise You Have and Skills You BringBachelors in Computer Science RequiredDemonstrated testing and...


  • Durham, United States Compunnel Inc. Full time

    Role - Software Engineer in TestLocation - Durham NC Hybrid - 2 weeks onsite a month Must Have - Java, Rest Assured, Python, Cucumber, API Testing and Batch Testing The Expertise You Have and Skills You BringBachelors in Computer Science RequiredDemonstrated testing and development of high volume Batch applicationAutomated Testing and Continuous Integration...


  • Durham, United States Compunnel Inc. Full time

    Job Title: Software Engineer in Test (Rest Assured)Duration: Long TermLocation: Durham, NC(Hybrid)Must Have: - Java/ Rest Assured and Postman - Looking for someone with API automation testing skills AND some knowledge/ability to develop in Java The Expertise You Have and Skills You BringBachelors in Computer Science RequiredDemonstrated testing and...


  • Durham, United States Fidelity TalentSource LLC Full time

    Job Description:Position Description: Monitors and analyzes performance metrics and application logs by leveraging application server technologies -- Tomcat, Node, or Apache. Conducts performance testing using LoadRunner, CloudTest, Datadog, Grafana and JMeter. Supports testing efforts across multiple business units supported by Enterprise Infrastructure...


  • Durham, North Carolina, United States Insight Global Full time

    Job SummaryWe are seeking a highly skilled Network Systems Engineer to join our team at Insight Global. As a Network Systems Engineer, you will be responsible for providing technical expertise in the design, implementation, and maintenance of our network infrastructure.Key ResponsibilitiesProvide troubleshooting methodologies to independently solve problems...


  • Durham, North Carolina, United States Fidelity TalentSource LLC Full time

    Job SummaryAt Fidelity TalentSource LLC, we are seeking a skilled Software Engineer in Test to join our team. As a key member of our Planning and Advice Platform, you will play a critical role in delivering high-quality financial planning tools to our customers.About the RoleWe are looking for a talented individual with a strong background in software...


  • Durham, North Carolina, United States Fidelity Investments Full time

    Job Description:We are seeking a skilled Cloud Onboarding Engineer to support our cloud onboarding processes, including developing process automations in native cloud environments, platform onboarding support, CI/CD pipeline development and execution, DevOps, and Azure Subscription and Resource Management.This role will help scale our growing public cloud...


  • durham, United States Fidelity TalentSource LLC Full time

    Job Description:Position Description:\u00A0\u00A0Drives software production stability, reliability, and resiliency within operating system environments (Linux) using Oracle, Java, Python, and PL/SQL. Promotes code into production using Continuous Integration and Continuous Delivery (CI/CD) tools -- Concourse, Jenkins, and Udeploy. Improves Cloud operations...

  • Full Stack Engineer

    2 months ago


    Durham, United States Fidelity TalentSource LLC Full time

    Fidelity Institutional Technology is looking for a Senior Software Engineer as a member of our team. While working to deliver business capabilities across a globally distributed team of IT professionals, the team continually strives to advance engineering excellence, technology innovation and agile practices. Must be a self-starter, able to work well with...


  • Durham, United States Labcorp Full time

    Labcorp is recruiting a Lead Project Analyst Engineer for a dynamic team in Burlington or RTP, NC. This position is located onsite. Overview: The person fulfilling the role of Lead Project Analyst Engineer (LPAE) will work on key initiatives directed at making Labcorp the leader in personalized diagnostic medicine and a Trusted Knowledge Partner. The...


  • Durham, North Carolina, United States Fidelity TalentSource LLC Full time

    Job Description:We are seeking a highly skilled Senior Software Engineer/Developer to join our team. As a Senior Software Engineer/Developer, you will be responsible for developing and maintaining high-quality client-facing security web applications and authorization security components leveraging client-side technologies such as Angular, Typescript,...


  • Durham, United States Fidelity TalentSource LLC Full time

    Job Description:Position Description: Develops and maintains high-quality client-facing security web applications and authorization security components leveraging client-side technologies -- Angular, Typescript, Webpack, JavaScript, CSS/SASS, HTML5, JQuery, NodeJS and GraphQL -- with server-side technologies -- Java, J2EE, Hibernate, Spring, Sprint Boot,...


  • Durham, United States Fidelity Investments Full time

    Software Engineer in TestFidelity TalentSource is your destination for discovering your next temporary role at Fidelity Investments. We are currently sourcing for a Software Engineer in Test to work at Fidelity Investments in Durham, NC!The TeamThe Planning and Advice Platform in the Fidelity Personal Investing Wealth Domain seeks to provide the BEST...


  • Durham, United States Fidelity TalentSource LLC Full time

    Software Engineer in Test  Fidelity TalentSource is your destination for discovering your next temporary role at Fidelity Investments. We are currently sourcing for a Software Engineer in Test to work at Fidelity Investments in Durham, NC! The Team The Planning and Advice Platform in the Fidelity Personal Investing Wealth Domain seeks to provide the BEST...


  • durham, United States Fidelity TalentSource LLC Full time

    Job Description:Position Description:\u00A0\u00A0Develops test automation frameworks, engineers REST Application Programming Interfaces (API s) and high-volume batch Applications. Develops automation using Core Java, Maven, and Web Services (SOAP/REST) testing framework or tools. Develops and tests code within the Windows environment. Implements Test Driven...


  • durham, United States Fidelity TalentSource LLC Full time

    Job Description:Position Description: Designs, develops, implements, and supports digital applications. Leads cross functional development teams in an Agile software development framework. Delivers innovative solutions that exceed customer s needs. Adopts modern technologies to build powerful tools and deliver outstanding end user experiences. Leads and...


  • durham, United States Fidelity TalentSource LLC Full time

    Software Engineer in Test  Fidelity TalentSource is your destination for discovering your next temporary role at Fidelity Investments. We are currently sourcing for a Software Engineer in Test to work at Fidelity Investments in Durham, NC! The Team The Planning and Advice Platform in the Fidelity Personal Investing Wealth Domain seeks to provide the BEST...