Sr. Splunk Engineer - TS/SCI with CI Poly | Chantilly, VA

ClearShark LLC; Virginia, Northern (IL, KY); Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Professional training resources

Volunteer Opportunities

Job summary

Optiv + ClearShark is seeking a highly skilled Sr. Splunk Engineer to join our cybersecurity team. The ideal candidate will implement, manage, and optimize the Splunk platform to automate and orchestrate security operations.

This role requires expertise in developing custom playbooks for stakeholders and integrating with other security tools. The position requires TS/SCI with CI polygraph, Security+ or CISSP, 7–10 years of related experience, and strong Linux/python/Ansible/Terraform skills.

Qualifications

• Currently holds a TS/SCI with CI polygraph.
• Security Certification (i.e, Security+, CISSP, etc) required.
• 7-10 years of related work experience.
• Experience operating in classified environments.
• Strong understanding of identity, SIEM, cybersecurity, and infrastructure concepts.
• Splunk Core certification required.
• Splunk IT Service Intelligence (ITSI) certification desired.
• Splunk Certified Architect/Consultant preferred.
• Experience with, or interest in, learning, deploying, and maintaining Splunk SOAR.
• Experience with, or interest in, learning, deploying, and maintaining Splunk Enterprise Security.
• Experience with, or interest in, learning, deploying, and maintaining Cribl Stream.
• Robust understanding of identity, SIEM, cybersecurity, and infrastructure concepts.
• Strong Linux and scripting (Python, Ansible, Terraform, JSON, others) experience.
• Experience working in a Security Operations Center (SOC).
• Initial understanding of leadership concepts and ideas.
• Strong interpersonal skills and ability to work collaboratively in a team.
• Ability to clearly communicate complex messages to a variety of audiences.
• Excellent problem-solving skills with a keen attention to detail.
• Willingness to travel to meet client needs.
• Open to government workers and/or government experience.

Responsibilities

• Create custom Splunk reports, dashboards, and content per customer requirements.
• Ability to troubleshoot Splunk instances.
• Execute all tasks outlined in the scope of work and follow standard operating procedures with minimal oversight.
• Work with clients to analyze and understand their needs and objectives.
• Serve as the escalation level for complex issues as necessary.
• Aid Associate, Level I, and Level II Engineers on sophisticated tasking.

Skills

Strong communication

Team collaboration

Problem solving

Security clearance TS/SCI with CI poly

Travel willingness

Education

Security+

CISSP

Tools

Splunk Core certification

Splunk ITSI

Splunk SOAR

Cribl Stream

Linux

Python

Ansible

Terraform

JSON

Job description

Optiv + ClearShark is looking for a highly skilled Sr. Splunk Engineer to join our cybersecurity team. The ideal candidate will be responsible for implementing, managing, and optimizing the Splunk platform to automate and orchestrate security operations. This role requires expertise in developing custom playbooks for various stakeholders, integrating with other security tools, and enhancing the overall security posture of the organization.

How you’ll make an impact

• Create custom Splunk reports, dashboards, and content per customer requirements.
• Ability to troubleshoot Splunk instances.
• Execute all tasks outlined in the scope of work and follow standard operating procedures with minimal oversight.
• Work with clients to analyze and understand their needs and objectives.
• Serve as the escalation level for complex issues as necessary.
• Aid Associate, Level I, and Level II Engineers on sophisticated tasking.

What we’re looking for

• Currently holds a TS/SCI with CI polygraph.
• Security Certification (i.e, Security+, CISSP, etc) required.
• 7-10 years of related work experience required.
• Experience operating in classified environments.
• Strong understanding of identity, SIEM, cybersecurity, and infrastructure concepts.
• Splunk Core certification required.
• Splunk IT Service Intelligence (ITSI) certification desired.
• Splunk Certified Architect/Consultant preferred.
• Experience with, or interest in, learning, deploying, and maintaining Splunk SOAR.
• Experience with, or interest in, learning, deploying, and maintaining Splunk Enterprise Security.
• Experience with, or interest in, learning, deploying, and maintaining Cribl Stream.
• Robust understanding of identity, SIEM, cybersecurity, and infrastructure concepts.
• Strong Linux and scripting (Python, Ansible, Terraform, JSON, others) experience.
• Experience working in a Security Operations Center (SOC).
• Experience operating in classified environments.
• Initial understanding of leadership concepts and ideas.
• Strong interpersonal skills and ability to work collaboratively in a team.
• Ability to clearly communicate complex messages to a variety of audiences.
• Excellent problem-solving skills with a keen attention to detail.
• Willingness to travel to meet client needs.
• Open to government workers and/or government experience.

What you can expect from Optiv

• Professional training resources
• Creative problem-solving and the ability to tackle unique, complex projects
• Volunteer Opportunities.

"Optiv Chips In" encourages employees to volunteer and engage with their teams and communities.

The ability and technology necessary to productively work remotely/from home (where applicable).

EEO Statement

Optiv + ClearShark is an equal opportunity employer. All qualified applicants for employment will be considered without regard to race, color, religion, sex, gender identity or expression, sexual orientation, pregnancy, age 40 and over, marital status, genetic information, national origin, status as an individual with a disability, military or veteran status, or any other basis protected by federal, state, or local law.

Optiv respects your privacy. By providing your information through this page or applying for a job at Optiv, you acknowledge that Optiv will collect, use, and process your information, which may include personal information and sensitive personal information, in connection with Optiv’s selection and recruitment activities. For additional details on how Optiv uses and protects your personal information in the application process.

If you sign up to receive notifications of job postings, you may unsubscribe at any time.

Optiv + ClearShark is a cybersecurity and IT solutions provider focused exclusively on serving the U.S. federal government. From the data center, cloud and to the edge, we have decades of experience securing and modernizing federal agency data and infrastructure. Our world-class advisory and engineering team is comprised of mission-focused, results-driven subject-matter experts with deep technology and agency domain knowledge and security clearances.