Senior Splunk Engineer

780 Chickasaw Aerospace, LLC; New York (NY); Hybrid; USD 125,000 - 150,000; Full time

Benefits offered by this job

Medical

Dental

Vision

401(k)

Family Planning / Fertility Assistance

STD/LTD/Basic Life/AD&D

Legal-Aid Program

Employee Assistance Program (EAP)

Paid Time Off (PTO)

Training and Development Opportunities

Job summary

Chickasaw Nation Industries, Inc. seeks a Senior Splunk Engineer to engineer, deploy, and maintain our SIEM implementation and related apps and interfaces for a federal client. You will lead technical design and mentoring, ensuring robust data integration and CIM-compliant security operations.

The role requires mastery of Splunk, hands-on solution development, and the ability to manage multiple systems with minimal supervision, while communicating effectively with staff and management.

Qualifications

• Bachelor’s degree in Computer Science, MIS, Cybersecurity or related field and 6+ years in IT infrastructure or security.
• 6 years of Splunk expertise with at least 3 years in large-scale enterprise solutions.
• Experience with Splunk premium apps like Enterprise Security and with custom add-ons.

Responsibilities

• Integrate CNI Core Competencies into daily SIEM operations and governance.
• Implement, optimize and maintain the Splunk SIEM infrastructure, apps, reports, alerts and dashboards.
• Lead prototyping, testing and deployment of new Splunk features and integrations.
• Mentor Tier II technicians and lead technical discussions with SIEM engineers.
• Ensure data flows and interconnections across the network environment.
• Provide documentation of configurations and changes.

Skills

Splunk architecture

Splunk Enterprise Security

CIM compliance

RBA (Risk Based Alerting)

Perl scripting

Regex

Linux administration

Leadership

Communication

Education

Bachelor’s degree in Computer Science or related field

Tools

Splunk

Job description

The Senior Splunk Engineer supports the federal client by engineering, developing, deploying and maintaining the organization’s SIEM implementation and its minor applications, integration, apps and interfaces. This position possesses mastery of the Splunk tool, with technical expertise including hands‑on solution development and implementation experience, and analytical skills for evaluating and optimizing capabilities of securing application solutions. The qualified candidate will be a critical team member with proven leadership, communication, organizational and interpersonal skills. This position provides technical consulting support as well as advanced technical design and specifications and planning process assistance, and must have the ability to multitask and solve complex technical problems.

Chickasaw Nation Industries, Inc. serves as a holding company with multiple subsidiaries engaged in several lines of business (Business Services, Health, Infrastructure and Engineering, Mission Optimization, Technology and Transportation) for the federal government and commercial enterprises. A portion of our profits is used to support Chickasaw citizens. We are proud to support the economic development and long-term viability of the Chickasaw Nation and its people.

CNI offers premium benefits eligible on the first day of hire to full-time employees; (Medical - Dental - Vision), Company Life Insurance, Short-Term and Long-Term Disability Insurance, 401(K) Immediate Vesting, Professional Development Assistance, Legal Aid Assistance Program, Family Planning / Fertility Assistance, Personal Time Off, and Observance of Federal Holidays.

As a federal contractor, CNI is a drug‑free workplace and adheres to the Federal Controlled Substance Act.

Essential Requirements

• The ability to obtain, maintain and access classified information at the Public Trust level.
• REQUIRED Certifications: Certified Splunk Architect
• Preferred Certifications: Additional Splunk certifications, CEH, CySA+, GSEC, CISM, CCNA, Security+, Server+, Linux+, Cloud+ (or equivalent higher-level certifications)
• Senior level mastery of SIEM front and back-end operations and configurations in addition to the interoperability with other security tools.
• Extensive knowledge of Splunk Enterprise Security and CIM compliance.
• Extensive knowledge of Splunk Risk Based Alerting (RBA).
• Cross functional and well‑rounded.
• Firm understanding of data flows and interconnections between multiple system with the network environment.
• Exercises multi-tasking skills and critical thinking by managing events in multiple systems, applications, and other priorities.
• Extensive knowledge of system back-end engineer and administration with heavy focus on Linux.
• Analytical skills for evaluating and optimizing capabilities of securing application solutions.
• Systematic approach to remediate system issues/problems and making recommendations to improve the efficiency of system operations and data availability utilizing current and future technologies.
• Must demonstrate capability to operate autonomously in a diverse environment with minimal supervision and provide accurate and precise documentation.
• Must demonstrate excellent troubleshooting skills, and be self‑motivated, results‑driven, and well organized.
• Must have excellent communication skills (written and verbal) with experience communicating effectively with all levels of staff and management.
• Extensive experience with SIEM (Security Information and Event Management) systems, and security event correlation is required.
• PERL/Linux shell scripting/Regex experience is highly preferable.

Essential Duties and Responsibilities

• Responsible for the integration of CNI Core Competencies into daily functions, including: commitment to integrity, knowledge/quality of work, supporting financial goals of the company, initiative/motivation, cooperation/relationships, problem analysis/discretion, accomplishing goals through organization, positive oral/written communication skills, leadership abilities, commitment to affirmative action, reliability/dependability, flexibility and ownership/accountability of actions taken.
• Implements, optimizes and maintains the SIEM infrastructure (Splunk), and deploys products, apps, reports, alerts and dashboards utilizing system development life cycle (SDLC) methodologies and business best practices.
• Increases the efficiency of the infrastructure to connect more enterprise data sources to Splunk Enterprise.
• Develops change management plans to be adaptable to the changing needs of the program.
• Leads prototyping and testing of new features and solutions.
• Manages and monitors Linux based on‑prem server infrastructure for configuration and software upgrades.
• Develops, maintains and optimizes installation of internal and external SIEM components.
• Oversees the optimization, operation and health of Splunk components and connections to data sources. (Query scheduling, performance tuning, apps, dashboards, saved searches, scheduled searches, alerts, etc.)
• Provides mentoring to Tier II technicians for problem resolution and lead technical discussions with technical engineers of SIEM and SIEM data connections.
• Shares and provides knowledge to junior security architects and engineers and recommends training as needed.
• Brings industry best practices and innovative ideas leading to continuous improvement of the Splunk environment.
• Additional duties may be assigned.

Education / Experience

Bachelor’s degree in Computer Science, Management of Information Systems, Cybersecurity or a related Math or Science discipline, and a minimum of six (6) years in IT infrastructure, networking, architecture, administration or security. Six (6) years of Splunk expertise, with at least three (3) years of experience in large scale enterprise‑level solutions. Requires experience with Splunk premium apps, such as Enterprise Security, and with architecting, developing, deploying, and configuring customized technical add‑ons.

Physical Demands

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of this job. Work is primarily performed in an office/warehouse setting. Regularly required to use hands to finger, handle, or feel. Regularly required to reach with hands and arms, occasionally above head. Regularly required to twist at the waist, climb and descend stairs while carrying objects. Ability to speak and hear. Frequently required to stand, walk, stoop, kneel, crouch or crawl. Occasionally required to sit and climb or balance. Regularly lifts and/or moves up to twenty‑five pounds and occasionally lifts and/or moves up to fifty pounds. Works near moving mechanical parts. Regularly exposed to general office and general office machinery noise. May be exposed to warehouse, truck or forklift noise.

EEO

EEO including Disability/Vet

Pay Range and Benefits

The estimated pay range for this role is $125,000 to $150,000, with the final offer contingent on location, skillset, and experience.

• Medical
• Dental
• Vision
• 401(k)
• Family Planning/Fertility Assistance
• STD/LTD/Basic Life/AD&D
• Legal-Aid Program
• Employee Assistance Program (EAP)
• Paid Time Off (PTO)
• Training and Development Opportunities

CNI supports a diverse culture that offers innovative approaches and customer‑centered services. When you do business with us, you gain efficient and cost‑effective solutions that help safeguard the environment, protect and secure key assets, and connect resources to needs.

We are proud to support the economic development of the Chickasaw Nation and to contribute to the tribal mission of enhancing the overall quality of life of the Chickasaw people.

A portion of our profits is used to support Chickasaw citizens through a multitude of programs and services such as education, health care, nutrition services, housing programs, legal services, elder and child care and community support programs. Successful economic development is an integral part of the Chickasaw Nation’s operations.