Splunk SIEM Data Onboarding Engineer - Ingest & Dashboards

Booz Allen Hamilton; Reston (VA); On-site; USD 99,000 - 225,000; Full time

Job summary

Booz Allen Hamilton is seeking a Splunk SIEM Data Onboarding Engineer to manage and enhance our Splunk environment, supporting data ingestion, analysis, and visualization for security operations.

You will design, deploy, and optimize Splunk infrastructure, dashboards, and alerts while collaborating with cross-functional teams to meet mission needs and enforce data management best practices.

Qualifications

• 2+ years managing and configuring Splunk.
• Experience with Splunk indexers, search heads, forwarders, deployment server.
• Experience building pipelines to parse, normalize, enrich, mask or dedupe data for Splunk.
• Proficient in Linux and Windows administration.
• Ability to obtain DoD 8570 IAT Level III cert within 30 days.

Responsibilities

• Design, deploy, and manage Splunk infrastructure.
• Develop and maintain Splunk dashboards, queries, and alerts.
• Integrate Splunk with data sources for ingestion.
• Monitor and troubleshoot Splunk performance.
• Collaborate with cross-functional teams to gather requirements and provide Splunk solutions.
• Implement and enforce best practices for Splunk data management and retention.
• Provide user training and support for Splunk activities.

Skills

Splunk administration

Linux administration

Windows administration

Data onboarding

Security TS/SCI clearance

DoD 8570 cert readiness

Python scripting

Networking fundamentals

Education

Bachelor's degree or higher in IT or related field

Tools

Splunk Enterprise

Cribl

Git

Ansible

tcpdump/Wireshark

Job description

Booz Allen Hamilton is seeking a Splunk SIEM Data Onboarding Engineer to manage and enhance our Splunk environment, supporting data ingestion, analysis, and visualization for security operations.

You will design, deploy, and optimize Splunk infrastructure, dashboards, and alerts while collaborating with cross-functional teams to meet mission needs and enforce data management best practices.