Sr. Splunk Engineer - TS/SCI with CI Poly | Chantilly, VA

Optiv Federal Inc.; Virginia (IL); On-site; USD 150,000 - 210,000; Full time

Job summary

Optiv + ClearShark is seeking a seasoned Sr. Splunk Engineer to implement, manage, and optimize Splunk across security operations. You will develop custom playbooks, integrate with other security tools, and help automate workflows.

In this role you will create reports and dashboards, troubleshoot instances, support clients, and mentor junior engineers while traveling as needed. A TS/SCI with CI polygraph is required, and you will collaborate in a fast-paced SOC environment to strengthen our

Qualifications

• 7-10 years of related work experience.
• Currently holds a TS/SCI with CI polygraph.
• Splunk Core certification is required.
• Experience operating in classified environments.
• Strong Linux and scripting skills (Python, Ansible, Terraform, JSON).
• Experience with or willingness to learn Splunk SOAR, ITSI, and Enterprise Security.
• Experience working in a Security Operations Center (SOC).

Responsibilities

• Create custom Splunk reports, dashboards, and content per customer requirements.
• Troubleshoot Splunk instances.
• Follow SOPs with minimal oversight.
• Work with clients to understand their needs and objectives.
• Serve as escalation level for complex issues.
• Aid Associate, Level I, and Level II Engineers on sophisticated tasking.

Skills

Splunk expertise

Linux scripting

Python

SOC operations

Customer-facing communication

Team collaboration

Troubleshooting

Security concepts

Tools

Splunk Core

Splunk ITSI

Splunk Enterprise Security

Splunk SOAR

Cribl Stream

Terraform

JSON

Ansible

Job description

About the Role

Optiv + ClearShark is looking for a highly skilled Sr. Splunk Engineer to join our cybersecurity team. The ideal candidate will be responsible for implementing, managing, and optimizing the Splunk platform to automate and orchestrate security operations. This role requires expertise in developing custom playbooks for various stakeholders, integrating with other security tools, and enhancing the overall security posture of the organization.

How you’ll make an impact

• Create custom Splunk reports, dashboards, and content per customer requirements.
• Ability to troubleshoot Splunk instances.
• Execute all tasks outlined in the scope of work and follow standard operating procedures with minimal oversight.
• Work with clients to analyze and understand their needs and objectives.
• Serve as the escalation level for complex issues as necessary.
• Aid Associate, Level I, and Level II Engineers on sophisticated tasking.

What we’re looking for

• Currently holds a TS/SCI with CI polygraph.
• Security Certification (i.e, Security+, CISSP, etc) required.
• 7-10 years of related work experience required.
• Experience operating in classified environments.
• Strong understanding of identity, SIEM, cybersecurity, and infrastructure concepts.
• Splunk Core certification required.
• Splunk IT Service Intelligence (ITSI) certification desired.
• Splunk Certified Architect/Consultant preferred.
• Experience with, or interest in, learning, deploying, and maintaining Splunk SOAR.
• Experience with, or interest in, learning, deploying, and maintaining Splunk Enterprise Security.
• Experience with, or interest in, learning, deploying, and maintaining Cribl Stream.
• Robust understanding of identity, SIEM, cybersecurity, and infrastructure concepts.
• Strong Linux and scripting (Python, Ansible, Terraform, JSON, others) experience.
• Experience working in a Security Operations Center (SOC).
• Experience operating in classified environments.
• Initial understanding of leadership concepts and ideas.
• Strong interpersonal skills and ability to work collaboratively in a team.
• Ability to clearly communicate complex messages to a variety of audiences.
• Excellent problem-solving skills with a keen attention to detail.
• Willingness to travel to meet client needs.
• Open to government workers and/or government experience.

What you can expect from Optiv

• Work/life balance
• Professional training resources
• Creative problem-solving and the ability to tackle unique, complex projects
• Volunteer Opportunities

Optiv Chips In encourages employees to volunteer and engage with their teams and communities. The ability and technology necessary to productively work remotely/from home (where applicable)

EEO Statement

Optiv + ClearShark is an equal opportunity employer. All qualified applicants for employment will be considered without regard to race, color, religion, sex, gender identity or expression, sexual orientation, pregnancy, age 40 and over, marital status, genetic information, national origin, status as an individual with a disability, military or veteran status, or any other basis protected by federal, state, or local law.

Optiv + ClearShark respects your privacy. By providing your information through this page or applying for a job at Optiv + ClearShark, you acknowledge that Optiv + ClearShark will collect, use, and process your information, which may include personal information and sensitive personal information, in connection with Optiv + ClearShark's selection and recruitment activities.

For additional details on how Optiv + ClearShark uses and protects your personal information in the application process, click here to view our Applicant Privacy Notice.

If you sign up to receive notifications of job postings, you may unsubscribe at any time.

We work alongside clients to manage cyber risk and equip them with perspectives and programs to accelerate business progress. Our real-world experience, deep vertical expertise and diverse teams enable us to face any challenge with confidence. We put you at the center of our unmatched ecosystem of people, products, partners and programs to design and implement agile solutions. Our adaptive approach continually assesses risk in the context of cyber and broader objectives to secure today's business and fortify it for the future. At Optiv, we manage cyber risk so you can secure your full potential.