Splunk Engineer

Description

Job Description:

Leidos Defense Group is seeking a Splunk Engineer in Stuttgart, Germany. The Splunk Engineer will provide overall engineering, and administration in supporting a very large distributed clustered Splunk environment consisting of search heads, indexers, deployers, deployment servers, heavy/universal forwarders and Splunk Enterprise Security premium app, spanning security, performance, and operational roles. The Engineer should be proficient with recognizing and onboarding new data sources into Splunk, analyzing the data for anomalies and trends, and building dashboards, searches, reports, etc. highlighting the key trends of the data. The Splunk engineer should be proficient within a Linux environment, editing and maintaining Splunk configuration files and apps.

The Splunk Engineer will be a member of the UCSA Splunk team and will be required to interact with end users to gather requirements, perform troubleshooting, and provide assistance with the creation of Splunk search queries and dashboards. The Splunk Engineer may be required interact with senior management, as necessary.

Primary Responsibilities

• This position supports UCSA DISAEUCOM On-Site SIEM/Splunk Support Task.

• Provide all on-demand response to the cyber analyst teams to create dynamic analytics, visualizations and analytic capabilities while providing testing and training support and supporting critical mission needs.

• Work directly with the analysts and stakeholders at each operational location to investigate questions raised by operations personnel to help improve operational effectiveness of the tools inside of the UCSA environment.

• Create and maintain a repository of all developed analytics in a centralized location approved by the government to allow for collaboration between the operational stakeholders and reduced duplication of efforts.

• Provides technical support for secure software development and integration tasks, including reviewing work products for correctness and adhering to the design concept and to user standards.

• Trains on-site personnel on how to conduct/create Splunk queries and dashboards.

• Support decomposition of requirements and use cases from the operational users/stakeholders and provide support to standardize content and tool development across the user community. Evaluate any user developed scripts or visualizations for correct design and performance optimization.

• Advise the UCSA Business Relationship Manager on operational practices, processes, and policies, how that can/may influence program actions, and advises the UCSA PM on how project plans and actions will/may affect operations. Assist in conveying information to/from the end users in developing/deploying any corrective actions.

• Prepare requirements list and software code and associated documentation deliverables.

• Create and maintain Cyber Situational Awareness Tools, Scripts, and Analytics Maintenance plan

Basic Qualifications

• US Citizen

• BA/BS in a technical discipline with at least 12 years of experience

• Splunk Power User and Splunk Admin certification

• Qualified IA personnel IAW DoDD 8570 and DoDD 8140 (IAT II certification)

• Active Top Secret/SCI clearance.

Preferred Qualifications

• Experience with DISA Network Enclaves

• Splunk Core Certified Advanced Power User

• Splunk Enterprise Certified Admin

• Splunk Enterprise Certified Architect

• Splunk Core Certified Consultant

Pay Range:

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.