Elite Splunk SOAR Engineer (TS/SCI)

Via Logic LLC; Suitland (MD); On-site; USD 108,000 - 195,000; Full time

Job summary

Leidos is seeking a Splunk SOAR Engineer to join our Suitland, MD team. You will design, deploy, and maintain the SOAR backend, administer and integrate the SOAR platform, and develop automated playbooks for threat triage and response.

You will apply DISA STIGs and NAVINTEL baselines while coordinating with Intelligence Community partners. Domestic travel may be required to NMIC and other CONUS/OCONUS sites.

Qualifications

• Bachelor's degree in CS/IT/IA or related, with 8+ years of relevant experience; or Master's with 6+ years.
• Active TS/SCI security clearance and IAT Level III (e.g., CISSP).
• 8+ years of engineering experience supporting Computer Network Defense (CND).
• 6+ years of experience with Splunk, including Splunk Add-ons, Apps, TAs, and Universal Forwarder.
• Expert knowledge of Splunk, including Splunk Enterprise, Splunk Enterprise Security, and Splunk SOAR.

Responsibilities

• Design, deploy, and maintain EAC backend architecture.
• Administer the SOAR platform, including configuration, asset integrations, and custom fields.
• Design, develop, test, and maintain automated SOAR playbooks for alert triage, enrichment, and risk based response.
• Integrate SOAR with Splunk Enterprise Security, ticketing systems, and threat intelligence feeds.
• Manage clustering, replication, indexing performance, and license usage.
• Apply DISA STIGs, SRGs, and NAVINTEL Information Assurance baselines.
• Maintain version control, approval workflows, and playbook governance.
• Configure and maintain the secure transmission of Audit.XML records to Intelligence Community partners through ITS and troubleshoot transmission failures.
• Implement standard incident response workflows aligned with MITRE ATT&CK, NIST SP 800-61, and HGCC N62 Defensive Cyber Operations procedures.
• Travel may be required between NMIC and other CONUS/OCONUS locations.

Skills

Splunk expertise

SDLC

Analytical skills

Communication skills

Security awareness

Clearance TS/SCI

Education

Bachelor's degree in CS/IT/IA or related

Master's degree in related field

Tools

Splunk Add-ons/Apps

Splunk Universal Forwarder

Job description

Leidos is seeking a Splunk SOAR Engineer to join our Suitland, MD team. You will design, deploy, and maintain the SOAR backend, administer and integrate the SOAR platform, and develop automated playbooks for threat triage and response.

You will apply DISA STIGs and NAVINTEL baselines while coordinating with Intelligence Community partners. Domestic travel may be required to NMIC and other CONUS/OCONUS sites.