Splunk Engineer - Consultant Certified SOAR Accreditation TSSCI CI Poly R-00052
Splunk Engineer - Consultant Certified SOAR Accreditation TSSCI CI Poly R-00052
Posted on :
07-04-2025
Employer Active
1 Vacancy
Job Alert
You will be updated with latest job alerts via emailValid email field required
Send jobs
Share
Send me jobs like this
Job Alert
You will be updated with latest job alerts via emailValid email field required
Send jobs
Job Description
True Zero Technologies a veteranowned small business was founded on the principle that the purposeful enablement of people and technology in an organization directly ties to the quality of its outcomes. True Zero recognizes that said outcomes begin and end with our people and that is what we have built a community of likeminded driven and passionate individuals and innovators who are aligned in a common goal of delivering top tier services to our customers. In 2023 True Zero was recognized as a Best Places to Work in two categories (Prosperous and Thriving $5MM $50MM in gross revenue) and MidAtlantic Region (DC DE MD NC VA WV) and in 2022 was recognized as one of Inc. Magazines Top 5000 Fastest Growing Companies.
True Zero Technologies is seeking experienced Splunk SOAR engineers or consultants to join our Data Analytics Practice. The position supports the design implementation and administration of True Zeros federal customers Splunk SOAR environment integration with the customers large Enterprise Splunk environment and other various tools. Candidates must possess prior experience working with Splunk SOAR from both an implementation perspective as well as custom playbook development and workflow defining experience. Candidates with experience in AWS Cloud Cribl Syslog and Axonious is a big plus.
As a TZT consultant the candidate will receive access to the full knowledge base which is driven by the True Zero community as well as the technical backing of the entire PS team. True Zero encourages collaboration and growth through information sharing and knowledge workshops. The candidate will also have access to our internal Slack channel to stay connected with the team as well as the necessary tools to train demo test and grow their professional skills.
Qualification Requirements
- Minimum 35 years of relevant market experience
- Splunk SOAR Accreditation or 2 years of Splunk SOAR or equivalent SOAR platformexperience
- Ability to showcase strong knowledge of Python language
- Experience designing and implementing ground up distributed Splunk SOAR installations
- Experience with advanced configuration of Splunk SOAR
- Experience maintaining and administering enterprise Splunk SOAR environments
- Experience developing custom SOAR playbooks workflows and configurations
- Experience integrating SOAR platform with other tools from both a data and automation perspective
- Enterprise experience working with large teams or collaborative environments
- Experience working in linux and windows environments ability to configure:
- Storage subsystems (I.e. partitioning Volume Groups Logical Volumes etc.
- SELinux and FAPolicyd
- Familiarity with different flavors of Linux distros (RedHat CentOS Ubuntu etc.
- File Permission Settings (linux/windows)
- Excellent written and oral skills ability to work closely with multiple customers manage expectations and track engagement scope.
Preferred Qualifications
- Splunk Core Consultant Certification
- Adept at extracting value from data and establishing security use cases
- Proficient in establishing standardized practices and documentation
- Possess an understanding of Syslog daemon configuration principles ideally in SyslogNG and RSyslog configurations.
- Cloud experience (AWS Azure etc.
- Cribl Experience working with source/destination definitions pipelines and PACKS as well as experience writing regular expressions and building routes
- Experience with Government CDM Programs
- Familiarity with the aggregation tool Axonius
- Development and API experience (Python Perl XML)
- AnsibleSpacewalkand other enterprise automation tool experience.
- Hardware experience and storage experience (SAN NAS etc.
U.S. Citizenship is required as this is in support of a Federal Customer.
Were actively searching for talented security and technology practitioners who are ready to experience the True Zero difference. As a True Zero team member youll enjoy:
Competitive salary paid twice per month
Best in class medical coverage
100 of medical premiums covered by True Zero
Company wide new business incentive programs
Contribution Incentives (i.e. white papers blog posts internal webinars etc.
3 weeks of PTO starting 11 Paid Holidays Annually
401k Program with 100 company match on the first 4
Monthly reimbursement of Cell Phone and Home Internet costs
Paternity/Maternity Leave
Investment in training and certifications to broaden and deepen your technical skills
Required Experience:
Contract
Employment Type
Full-Time
Key Skills
Report This Job
Disclaimer: Drjobpro.com is only a platform that connects job seekers and employers. Applicants are advised to conduct their own independent research into the credentials of the prospective employer.We always make certain that our clients do not endorse any request for money payments, thus we advise against sharing any personal or bank-related information with any third party. If you suspect fraud or malpractice, please contact us via contact us page.
