Senior Splunk SOAR Administrator - TS/SCI, SIEM Expert

G2IT, LLC.; Suitland (MD); On-site; USD 130,000 - 190,000; Full time

Job summary

G2IT, LLC. in Suitland, MD seeks a Splunk SOAR Administrator to provide engineering, operations, and technical support for SIEM platforms supporting threat detection and incident management for a government program. The role emphasizes automation and secure operations.

The ideal candidate holds a TS/SCI clearance, IAT Level III (CISSP), and 6–10+ years in CND and Splunk-related work, with strong collaboration across teams and adherence to standards such as MITRE ATT&CK and NIST guidelines.

Qualifications

• Bachelor's degree or higher in CS/IT/Info Assurance with 8+ years of relevant experience; or Master's with 6+ years.
• Active TS/SCI security clearance.
• Active IAT Level III certification (e.g., CISSP).
• 8+ years of engineering experience supporting Computer Network Defense (CND).
• 6+ years of experience with Splunk including Add-ons, Apps, TAs, and Universal Forwarder.
• Expert knowledge of Splunk products (Enterprise, Enterprise Security, SOAR).
• Strong SDLC experience; analytical and problem-solving skills.
• Excellent verbal and written communication skills.

Responsibilities

• Design, deploy, and maintain backend architecture.
• Administer the SOAR platform with configurations and integrations.
• Develop and maintain automated SOAR playbooks for alert triage and response.
• Integrate SOAR with Splunk ES, ticketing systems, and threat feeds.
• Manage clustering, replication, indexing performance, and licensing.
• Apply DISA STIGs, SRGs, and NAVINTEL baselines.
• Maintain version control, approval workflows, and playbook governance.
• Configure secure transmission of Audit.XML records and troubleshoot transmissions.
• Implement incident response workflows aligned with MITRE ATT&CK, NIST SP 800-61, HGCC procedures.

Skills

Splunk

SOAR administration

Security operations

Incident response

Communication skills

Networking basics

Education

Bachelor's degree in CS/IT/Info Assurance

Master's degree in related field

10+ years LAN/WAN experience in lieu of degree

Tools

Splunk Add-ons

Splunk Apps

Universal Forwarder

SIEM integration

Job description

G2IT, LLC. in Suitland, MD seeks a Splunk SOAR Administrator to provide engineering, operations, and technical support for SIEM platforms supporting threat detection and incident management for a government program. The role emphasizes automation and secure operations.

The ideal candidate holds a TS/SCI clearance, IAT Level III (CISSP), and 6–10+ years in CND and Splunk-related work, with strong collaboration across teams and adherence to standards such as MITRE ATT&CK and NIST guidelines.