Senior Cyber Security Engineer (Splunk)

Step into a mission-driven cybersecurity role where your expertise directly strengthens the security resilience and intelligence of an enterprise-scale environment. Were looking for a Senior Cyber Security Engineer who is passionate about protecting critical systems solving complex technical challenges and building highperformance data collection and monitoring capabilities that empower smarter decision-making.

Responsibilities:

• Troubleshoot and resolve new or existing data collection issues to ensure accurate reliable ingestion of securityrelevant data.

• Diagnose and remediate system issues affecting stability performance and overall usability.

• Deploy manage and maintain both supported and unsupported Splunk Addons across diverse data sources.

• Develop and maintain detailed documentation including BOE artifacts engineering documentation change management records system security plans and accreditation materials.

• Deliver comprehensive Splunk deployment documentation outlining specifications deployment strategies and architectural considerations for production environments.

• Implement and uphold strict rolebased access controls to ensure data is shared only on a validated needtoknow basis.

• Design and deploy Splunk forwarders using centralized configuration management via the Splunk Deployment Server enabling rapid and consistent deployments.

Qualifications:

Required:

• An active TS/SCI with Polygraph is required.

• Bachelors degree or 4 additional years of cyber experience in lieu of a degree.

• 10 years of experience in a cybersecurity role.

• Experience with Security Information and Event Management (SIEM) platforms and/or Splunk.

• Knowledge of Linux systems administration general operating system security practices TCP/IP networking and network security concepts.

• Knowledge of Certification and Accreditation (C&A) processes.

• Knowledge of DoD policy and technical security guidance for information systems.

• DoD Directive 8570.1 IAT Level II or higher certification or the ability to obtain within six (6) months.

• Splunk certification is required.

Desired:

• Experience with Red Hat CentOS or similar Linux distributions.

• Exposure to AWS or other cloud platforms.

• Knowledge of ICS 50027 audit collection requirements.

• Familiarity with Enterprise Security Services Host-Based Security Services Enterprise Vulnerability Scanning Services and User Activity Monitoring (UAM).

• Ability to tailor data feed creation to ensure logs are standardized according to policy and compliance standards.

Physical Requirements:

• Ability to remain in a stationary position approximately 50% of the time.

• Occasional movement within the office to access equipment or collaborate with colleagues via meetings presentations or communication tools.