Splunk SIEM Data Onboarding Specialist

Booz Allen Hamilton; Norfolk (VA); On-site; USD 99,000 - 225,000; Full time

Job summary

Booz Allen Hamilton is seeking a Splunk SIEM Data Onboarding Engineer to design, deploy, and optimize our Splunk environment, ensuring reliable data ingestion, search, and visualization across security operations.

The role requires hands-on experience with Splunk architecture, data pipelines, Linux/Windows administration, and a TS/SCI clearance; DoD 8570 certifications are preferred. You will collaborate with diverse teams and advance best practices.

Qualifications

• 2+ years of experience managing and configuring Splunk.

Responsibilities

• Design, deploy, and manage Splunk infrastructure.
• Develop and maintain Splunk dashboards, queries, and alerts.
• Integrate Splunk with various data sources to ensure comprehensive data ingestion.
• Monitor and troubleshoot Splunk performance issues.
• Collaborate with cross-functional teams to gather requirements and provide Splunk solutions.
• Implement and enforce best practices for Splunk data management and retention.
• Provide user training and support for Splunk-related activities.

Skills

Security clearance readiness

Scripting experience

Team collaboration

Education

Associate's degree in IT

Bachelor's degree in IT

Master's degree in IT

Tools

Splunk

Splunk Architecture

Linux

Windows

SPL

Python

PowerShell

Cribl

Splunk REST API

Git

Ansible

Regex

Job description

Booz Allen Hamilton is seeking a Splunk SIEM Data Onboarding Engineer to design, deploy, and optimize our Splunk environment, ensuring reliable data ingestion, search, and visualization across security operations.

The role requires hands-on experience with Splunk architecture, data pipelines, Linux/Windows administration, and a TS/SCI clearance; DoD 8570 certifications are preferred. You will collaborate with diverse teams and advance best practices.