SPLUNK Engineer SME

Dobbs Defense Solutions; Corridor North (MD); On-site; Full time

Job summary

A defense solutions company is seeking a Splunk Engineer SME to enhance their Splunk infrastructure. The ideal candidate will implement best practices, monitor performance, and integrate Splunk with other systems. Requires experience in SOC/NOC environments and DoD certification.

Qualifications

• Experience importing data into Splunk from various security sources.
• Experience supporting SOC or NOC environments in a clustered setup.
• Proven experience as a Splunk Administrator or similar role.

Responsibilities

• Monitor the health and performance of Splunk infrastructure.
• Implement best practices for Splunk deployment and optimization.
• Develop and maintain Splunk alerts, dashboards, and reports.

Skills

Splunk Search Processing Language (SPL)

Data ingestion and troubleshooting

Collaboration with stakeholders

Splunk data models and deployment

Education

DoD 8570 Level 3 Certification

Splunk Architect or Admin certifications

Tools

Splunk

Virtualization technologies

Job description

3 days ago Be among the first 25 applicants

Our Mission

At Dobbs Defense, we deliver mission-centric IT, Cyber, and data analytics solutions for our government and commercial clients through the convergence of automation, innovation, training, and education. Delivering high-quality IT, cybersecurity, and data analytics solutions through proven and innovative methods is our vision.

Job Description

Dobbs Defense Solutions is seeking a Splunk Engineer SME to join our team. The ideal engineer will maintain and enhance the existing Splunk infrastructure in the enterprise. Projects will also involve the implementation of Splunk Enterprise Security (ES), Security Orchestration, Automation, and Response (SOAR), and other vendor solutions.

Duties

• Monitor the health, performance, and capacity utilization of Splunk infrastructure
• Implement best practices for Splunk deployment, configuration, and optimization
• Design and manage Splunk data models, indexes, and search heads
• Develop and maintain Splunk alerts, dashboards, and reports to meet client needs
• Troubleshoot and resolve issues related to Splunk configuration, data ingestion, and search performance
• Collaborate with client stakeholders and cross-functional teams to integrate Splunk with other systems and applications
• Provide training and support to client teams on Splunk usage and best practices
• Proven experience as a Splunk Administrator or similar role
• Strong understanding of Splunk architecture, components, and deployment options
• Proficiency in Splunk Search Processing Language (SPL) for creating complex search queries and reports

Qualifications

Required education and experience:

• Experience importing data into Splunk from various sources including endpoint security, network security (Firewalls, IPS/IDS, DNS, Proxy), data and application security, cloud security, and technologies
• Experience supporting SOC or NOC environments in a Splunk clustered setup
• Experience with virtualization technologies
• Splunk Architect, Splunk Admin certifications preferred
• DoD 8570 Level 3 Certification is required

Required Clearance

• TS/SCI

Working Environment

• Onsite

Our Equal Employment Opportunity Policy

Dobbs Defense Solutions is an Equal Opportunity Employer. We consider all qualified candidates based on merit, qualifications, and business needs. Employment decisions are made without regard to protected statuses. We are committed to fair hiring, promotion, and employment practices.