Overview In this role you will manage and secure enterprise Splunk environments to enhance security monitoring and log analytics for a Navy customer. You will work within a security-focused team to optimize data ingestion, create dashboards, and ensure RMF-aligned compliance. The position involves integrating Splunk with AWS, databases, Linux, and Windows systems, and automating tasks with Python and shell scripting. This is a hands-on, mission-driven role that combines operational excellence with critical cyber defense impact.
Responsibilities- Administer, configure, and maintain Splunk Enterprise, Add-ons, and Universal Forwarders
- Build SQL queries, dashboards, alerts, and CIM-compliant data mappings
- Integrate Splunk with AWS, databases, Linux, and Windows systems
- Monitor system performance and troubleshoot ingest, parsing, and indexing issues
- Support RMF compliance activities and documentation
- Automate tasks using Python and shell scripting
Key requirements- Bachelor's degree or higher with 8+ years of relevant experience (or Master's with 6+ years)
- 15+ years of experience including at least 10 years in LAN/WAN may substitute for degree
- Active TS/SCI clearance
- Active IAT Level III certification (e.g., CISSP)
- Experience administering Splunk Enterprise, Add-ons, and Universal Forwarders
- Experience building SQL queries, dashboards, and CIM-compliant data mappings
- Experience integrating Splunk with AWS, databases, Linux, and Windows
- Experience monitoring performance and troubleshooting ingest/ indexing issues
- Experience RMF compliance activities and documentation
- Experience automating tasks with Python and shell scripting
- analytical thinking
- problem solving
- attention to security requirements
- Splunk Enterprise administration
- Splunk Add-ons and Universal Forwarders
- SQL queries and dashboards
