Senior Splunk Engineer — Remote, ES/ITSI Focus

Leidos; Ashburn (VA); On-site; USD 108,000 - 195,000; Full time

Job summary

Leidos is seeking a Splunk Engineer to support CBP SOC, focusing on a large distributed Splunk environment including search heads, indexers, and Enterprise Security apps. You will onboard data sources, build dashboards, and develop queries while maintaining configurations in a Linux environment and leveraging automation tools like Ansible.

The role requires a Bachelor's degree with 8+ years in IT, strong Splunk expertise, and familiarity with Cloud services and DoD 8570 IAT II requirements.

Qualifications

• Bachelor's degree with 8+ years in IT/cybersecurity.
• 4+ years in Linux, Splunk, Ansible, and app interface development.
• Experience with REST APIs and scripting (Python, Bash, PowerShell).
• Familiarity with Git for change/configuration management.
• 4+ years in a Splunk clustered environment and Enterprise Security/ITSI.
• Knowledge of Cloud services (AWS, Office 365).
• Regex knowledge and basic networking principles.

Responsibilities

• Provide engineering and administration for a large distributed Splunk environment.
• Onboard new data sources, build dashboards, searches, reports.
• Edit and maintain Splunk configuration files and apps; use automation tools.
• Interact with end users to gather requirements and troubleshoot Splunk queries and dashboards.
• Collaborate with Enterprise Splunk team and cybersecurity engineering.

Skills

Linux

Splunk

Ansible

REST APIs

Python

Bash

PowerShell

Regex

Networking

Security+ / DoD8570 IAT II

Education

Bachelor's degree

Tools

Splunk Enterprise Security

Splunk ITSI

Splunk Cloud

Splunk SOAR

Splunk Core

Confluence

JIRA

ServiceNow

Cribl CCOE

Job description

Leidos is seeking a Splunk Engineer to support CBP SOC, focusing on a large distributed Splunk environment including search heads, indexers, and Enterprise Security apps. You will onboard data sources, build dashboards, and develop queries while maintaining configurations in a Linux environment and leveraging automation tools like Ansible.

The role requires a Bachelor's degree with 8+ years in IT, strong Splunk expertise, and familiarity with Cloud services and DoD 8570 IAT II requirements.