TS/SCI Splunk Engineer — Data Insights & Security

CDW group; McLean (VA); On-site; USD 190,000 - 240,000; Full time

Job summary

CDW is seeking an experienced Splunk Solutions Specialist to design, implement, and manage Splunk environments across on-prem and cloud infrastructures. The role emphasizes data onboarding, SPL querying, and developing dashboards to meet operational and security needs.

The position requires active TS/SCI security clearance and onsite work at the National Maritime Intelligence Center in Suitland, MD. A minimum of 8 years in Splunk administration and related data analysis is expected, with a

Responsibilities

• Install, configure, and manage Splunk environments across on-premise and cloud infrastructures.
• Perform upgrades, patches, and maintenance to ensure optimal system performance and security.
• Monitor Splunk system health and troubleshoot performance, configuration, and connectivity issues.
• Collaborate with application owners, network engineers, and stakeholders to identify relevant data sources.
• Develop and maintain data onboarding processes, including parsing, indexing, and normalization of logs and metrics from diverse systems.
• Write and optimize regular expressions, data transforms, and event types to ensure accurate data ingestion.
• Create SPL queries to perform analysis and extract meaningful insights.
• Develop dashboards, reports, and alerts tailored to operational, security, and business requirements.

Job description

CDW is seeking an experienced Splunk Solutions Specialist to design, implement, and manage Splunk environments across on-prem and cloud infrastructures. The role emphasizes data onboarding, SPL querying, and developing dashboards to meet operational and security needs.

The position requires active TS/SCI security clearance and onsite work at the National Maritime Intelligence Center in Suitland, MD. A minimum of 8 years in Splunk administration and related data analysis is expected, with a