Splunk Administrator Level 4

$80,000 - $160,000/Yr

Spyros Information And Technology Consulting - Annapolis Junction, MD

Full-time - Mid Level

Annapolis Junction, MD

Professional, Scientific, and Technical Services

About the position

The Splunk Administrator Level 4 position at Spyros Information & Technology Consulting, LLC involves implementing and managing advanced software security techniques, particularly focusing on Splunk and its integration with various security tools. The role requires a strong background in security testing, systems administration, and the ability to design and maintain SIEM and SOAR solutions. The position is critical for ensuring the security and integrity of software systems and requires collaboration with team members to promote secure coding practices.

Responsibilities

• Implements, tests, and operates advanced software security techniques in compliance with technical reference architecture.
• Performs ongoing security testing and code review to improve software security.
• Troubleshoots and debugs issues that arise.
• Provides engineering designs for new software solutions to help mitigate security vulnerabilities.
• Contributes to all levels of the architecture and maintains technical documentation.
• Consults team members on secure coding practices and develops familiarity with new tools and best practices.
• Designs, implements, and maintains SIEM and SOAR solutions.
• Designs and implements threat detection and automates incident response processes.
• Integrates various security tools with SIEM and SOAR platforms via APIs.
• Maintains SIEM applications to collect and aggregate IDS and IPS data from network sensors and other security-relevant devices.
• Utilizes expertise in Splunk 'Search' language, Splunk Dashboards, Reports, Lookup Tables, and Summary Indexes.
• Builds Splunk dashboards that take inputs from various data sources and identify anomalous activities by severity levels.
• Performs troubleshooting and provides assistance with the creation of Splunk search queries and dashboards.

Requirements

• Must possess Active Top Secret clearance with SCI eligibility.
• Requires 8 to 10 years experience with BS/BA or 6 to 8 years experience with MS/MA or 3 to 5 years experience with PhD.
• Experience with importing data in Splunk from various sources including endpoint security, network security, data and application security, and cloud security.
• Experience with performing systems administration, including installation, configuration, monitoring system performance, upgrades, and troubleshooting of Splunk.
• Experience designing, implementing, configuring, operating, or testing IT systems or security infrastructure.
• Experience building dashboards highlighting key trends of the data.
• Proficiency within a Windows and Linux environment, including editing and maintaining Splunk configuration files and apps.
• Experience in a Splunk clustered environment supporting SOC or NOC environment required.
• Experience with virtualization technologies required.
• DoD 8570 Level 3 Certification.

Benefits

• Salary range of $80,000 - $160,000, commensurate upon education and applicable years of experience.