Splunk Cybersecurity SME (Remote)

				Overview:

* Tier One Technologies is seeking a Splunk Cybersecurity SME to support our direct US Government client. 
* This is going to be a 100% remote Contract-to-Hire position.
* SELECTED CANDIDATES WITHOUT REQUIRED CLEARANCE WILL BE SUBJECT TO A FEDERAL GOVERNMENT BACKGROUND INVESTIGATION TO RECEIVE IT.

Responsibilities:

* Design, deploy, and maintain on-premises and cloud based Splunk environments to support enterprise-level monitoring, alerting, and reporting. 
* Execute new projects as well as data and user onboarding.
* Manage knowledge objects (fields, extractions, tags, event types, lookups, workflow actions, aliases, macros, and so on) - through automations, scripting, management server functions; to include .conf and .cfg files in scope of the last four Splunk Enterprise versions.
* Mentor and guide junior researchers or team members.
* Support off-hours and weekend efforts for incident investigations and systems maintenance.

Qualifications:

* A degree from an accredited College/University in the applicable field of services is required. If the individual's degree is not in the applicable field, then 4 additional years of related experience is required
* 8+ years of overall experience in cybersecurity.
* 5+ years of specific Splunk experience.
* Proven Splunk deployment and configuration management experience in large-scale environments.
* Proficiency in writing complex Splunk queries, dashboards, and alerts using SPL (Search Processing Language).
* Experience with REST APIs for Splunk and external system integration.
* Ability to leverage the Splunk AI Assistant and other AI tools to increase accuracy and efficiency of task and other deliverables.
* Advanced knowledge of Unix/Linux and/or Windows systems administration and troubleshooting.
* Strong scripting skills in Bash, Python, JavaScript, SQL and PowerShell for automation and integration tasks.
* Experience with Splunk upgrades, patching, and performance tuning.
* Proficiency in integrating Splunk with cloud platforms (AWS, GCP, Azure).
* Understanding of security and compliance requirements and implementation of role-based access controls (RBAC) in Splunk.
* Strong knowledge of logging standards and best practices across application and infrastructure layers.

* Strong problem-solving skills and the ability to translate research insights into practical solutions that address real-world challenges.
* Strong communication and collaboration skills with the ability to articulate complex technical concepts to both technical and non-technical audiences.
* Must be a US Citizen or have permanent residence status (Green Card).
* Must be able to obtain a Position of Public Trust Clearance.
* Must be able to pass a drug screening, criminal history, and credit checks.
* Must have lived in the United States for the past 5 years.
* Cannot have more than 6 months travel outside the United States within the last five years. Military Service excluded. (Exception does not include military family members).
			

Apply

Share this job:

Share this Job

View company profile

A.C. Coy

Connect To Our Company