Senior Splunk Engineer - Cyber Defense & SIEM Expert

Optiv Federal Inc.; Virginia (IL); On-site; USD 150,000 - 210,000; Full time

Job summary

Optiv + ClearShark is seeking a seasoned Sr. Splunk Engineer to implement, manage, and optimize Splunk across security operations. You will develop custom playbooks, integrate with other security tools, and help automate workflows.

In this role you will create reports and dashboards, troubleshoot instances, support clients, and mentor junior engineers while traveling as needed. A TS/SCI with CI polygraph is required, and you will collaborate in a fast-paced SOC environment to strengthen our

Qualifications

• 7-10 years of related work experience.
• Currently holds a TS/SCI with CI polygraph.
• Splunk Core certification is required.
• Experience operating in classified environments.
• Strong Linux and scripting skills (Python, Ansible, Terraform, JSON).
• Experience with or willingness to learn Splunk SOAR, ITSI, and Enterprise Security.
• Experience working in a Security Operations Center (SOC).

Responsibilities

• Create custom Splunk reports, dashboards, and content per customer requirements.
• Troubleshoot Splunk instances.
• Follow SOPs with minimal oversight.
• Work with clients to understand their needs and objectives.
• Serve as escalation level for complex issues.
• Aid Associate, Level I, and Level II Engineers on sophisticated tasking.

Skills

Splunk expertise

Linux scripting

Python

SOC operations

Customer-facing communication

Team collaboration

Troubleshooting

Security concepts

Tools

Splunk Core

Splunk ITSI

Splunk Enterprise Security

Splunk SOAR

Cribl Stream

Terraform

JSON

Ansible

Job description

Optiv + ClearShark is seeking a seasoned Sr. Splunk Engineer to implement, manage, and optimize Splunk across security operations. You will develop custom playbooks, integrate with other security tools, and help automate workflows.

In this role you will create reports and dashboards, troubleshoot instances, support clients, and mentor junior engineers while traveling as needed. A TS/SCI with CI polygraph is required, and you will collaborate in a fast-paced SOC environment to strengthen our