Senior Splunk Cybersecurity Engineer (TS/SCI)

CACI; United States; On-site; USD 104,000 - 218,000; Full time

Job summary

CACI is seeking a Senior Cyber Security Engineer (Splunk) to protect DoD-scale systems. You will troubleshoot data collection, resolve ingestion issues, and deploy Splunk add-ons across diverse data sources.

The role requires TS/SCI with poly, 10+ years in cybersecurity, SIEM/Splunk experience, Linux, networking, and DoD accreditation knowledge. Splunk certification is required and a DoD 8570.1 IAT II+ or ability to obtain within six months.

Qualifications

• Active TS/SCI with Polygraph is required.
• Bachelor’s degree, or 4+ years cyber experience in lieu of a degree.
• 10+ years of experience in a cybersecurity role.
• Experience with SIEM platforms and/or Splunk.
• Knowledge of Linux systems administration, TCP/IP networking, and security concepts.
• Knowledge of Certification and Accreditation (C&A) processes.
• Knowledge of DoD policy and technical security guidance for information systems.
• DoD Directive 8570.1 IAT Level II+ certification, or the ability to obtain within six months.
• Splunk certification is required.

Responsibilities

• Troubleshoot and resolve data collection issues to ensure accurate, reliable ingestion of security-relevant data.
• Diagnose and remediate system issues affecting stability, performance, and usability.
• Deploy, manage, and maintain Splunk Add-ons across diverse data sources.
• Develop and maintain detailed documentation, including BOE artifacts and security documentation.
• Deliver Splunk deployment documentation outlining specifications and architecture for production environments.
• Implement and uphold RBAC to ensure data is shared on a need-to-know basis.
• Design and deploy Splunk forwarders using Deployment Server for rapid, consistent deployments.

Skills

SIEM expertise

Linux administration

Networking (TCP/IP)

C&A processes

DoD policy knowledge

IAT Level II+ certification

Splunk certification

Data ingestion troubleshooting

RBAC access controls

Threat monitoring

Education

Bachelor’s degree or equivalent cyber experience

Tools

Splunk

Deployment Server

Red Hat/CentOS

AWS cloud exposure

Job description

CACI is seeking a Senior Cyber Security Engineer (Splunk) to protect DoD-scale systems. You will troubleshoot data collection, resolve ingestion issues, and deploy Splunk add-ons across diverse data sources.

The role requires TS/SCI with poly, 10+ years in cybersecurity, SIEM/Splunk experience, Linux, networking, and DoD accreditation knowledge. Splunk certification is required and a DoD 8570.1 IAT II+ or ability to obtain within six months.