TS/SCI Splunk Administrator – Security Analytics Expert

Leidos; Suitland (MD); On-site; USD 108,000 - 195,000; Full time

Job summary

Leidos is seeking a skilled Splunk Administrator to join our team in Suitland, MD. You will manage and optimize enterprise Splunk environments to strengthen security monitoring and log analytics for our Navy customer.

Responsibilities include administering Splunk Enterprise, building CIM-compliant data mappings, integrating with AWS and various OS environments, and automating tasks with Python and shell scripting. A TS/SCI clearance and IAT Level III certification are required.

Qualifications

• Bachelor's degree in Computer Science, IT, IA, or related with 8+ years of relevant experience, or a Master's with 6+ years; 15+ years may be substituted for degree. (verifiable)
• Active TS/SCI security clearance required.
• Active IAT Level III certification (e.g., CISSP).
• Administer, configure, and maintain Splunk Enterprise, Add-ons, and Universal Forwarders.
• Build SQL queries, dashboards, alerts, and CIM-compliant data mappings.
• Integrate Splunk with AWS, databases, Linux, and Windows systems.
• Monitor performance and troubleshoot ingest, parsing, and indexing issues.
• Support RMF compliance activities and documentation.
• Automate tasks using Python and shell scripting.

Responsibilities

• Administer, configure, and maintain Splunk Enterprise, Add-ons, and Universal Forwarders.
• Build SQL queries, dashboards, alerts, and CIM‑compliant data mappings.
• Integrate Splunk with AWS, databases, Linux, and Windows systems.
• Monitor system performance and troubleshoot ingest, parsing, and indexing issues.
• Support RMF compliance activities and documentation.
• Automate tasks using Python and shell scripting.

Skills

Splunk administration

SQL queries

Python scripting

Shell scripting

CIM data mappings

AWS integration

Linux/Windows systems

Security monitoring

Education

Bachelor's degree in Computer Science, Information Technology, Information Assurance, or related with 8+ years experience; or Master's with 6+ years; 15+ years in lieu

Tools

Splunk Enterprise

Splunk Add‑ons

Splunk Universal Forwarders

SQL

AWS

Linux

Windows

Job description

Leidos is seeking a skilled Splunk Administrator to join our team in Suitland, MD. You will manage and optimize enterprise Splunk environments to strengthen security monitoring and log analytics for our Navy customer.

Responsibilities include administering Splunk Enterprise, building CIM-compliant data mappings, integrating with AWS and various OS environments, and automating tasks with Python and shell scripting. A TS/SCI clearance and IAT Level III certification are required.