Splunk Enterprise & Enterprise Security Lead

Leidos LLC; Suitland (MD); On-site; USD 108,000 - 195,000; Full time

Job summary

Leidos is seeking a skilled Splunk engineer to administer enterprise security platforms and integrate data sources across the CND framework. You will manage CIM compliance, create and tune dashboards, and support RMF-related tasks in a fast-moving environment.

You will onboard new data sources, ensure data quality and normalization, and assist incident response, threat hunting, detection engineering, and content governance.

Qualifications

• Bachelor’s degree in CS/IT/IA or related with 8+ years experience or a Master’s degree with 6+ years experience.
• Active TS/SCI security clearance.
• Demonstrated experience supporting Computer Network Defense (CND) operations and technologies.
• 6+ years professional experience in Splunk, Splunk Add-ons and Apps, and Splunk TA and Universal Forwarder installation, integration, configuration, administration, maintenance, and performance of RMF functions.
• Deep experience with Splunk Enterprise/ES, search processing language (SPL), CIM mapping, dashboards, and Linux administration.
• Experience supporting SOC workflows and SIEM tuning.

Responsibilities

• Administer Splunk Enterprise, Enterprise Security, CIM compliance, correlation searches, RBAs, dashboards, and data models.
• Onboard new data sources and ensure quality, parsing, and normalization.
• Support incident response, threat hunting, detection engineering, and content governance.
• Produce operational reports, posture summaries, dashboards, and detection documentation.

Skills

TS/SCI clearance

Splunk

Incident response

Threat hunting

SOC workflows

SIEM tuning

Education

Bachelor’s degree in CS/IT/IA or related

Master’s degree in related field

Tools

Splunk Enterprise

Splunk Add-ons and Apps

Splunk TA

Universal Forwarder

Linux administration

Job description

Leidos is seeking a skilled Splunk engineer to administer enterprise security platforms and integrate data sources across the CND framework. You will manage CIM compliance, create and tune dashboards, and support RMF-related tasks in a fast-moving environment.

You will onboard new data sources, ensure data quality and normalization, and assist incident response, threat hunting, detection engineering, and content governance.