Назад
Company hidden
обновлено 1 день назад

Senior Splunk Engineer

125 000 - 150 000$
Формат работы
remote (только USA)
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Senior Splunk Engineer (SIEM/Cybersecurity): Engineering, deploying, and maintaining Splunk-based SIEM infrastructure and integrations for a federal client with an accent on Splunk Enterprise Security, Risk-Based Alerting, Linux administration, and enterprise data connectivity. Focus on optimizing Splunk components, developing customized technical add-ons, troubleshooting complex security systems, and mentoring junior engineers.

Location: Remote; work is also described as primarily performed in an office/warehouse setting, and the role supports a federal client.

Salary: $125,000–$150,000 annually; final offer depends on location, skillset, and experience.

Company

hirify.global is a holding company with subsidiaries providing business, health, infrastructure and engineering, mission optimization, technology, and transportation services to federal government and commercial clients.

What you will do

  • Engineer, deploy, optimize, and maintain the Splunk-based SIEM infrastructure, including apps, reports, alerts, dashboards, searches, and data-source connections.
  • Develop customized technical add-ons, integrations, interfaces, and internal and external SIEM components using SDLC methodologies and business best practices.
  • Increase the efficiency of the infrastructure and connect additional enterprise data sources to Splunk Enterprise.
  • Manage and monitor Linux-based on-premises server infrastructure, including configuration and software upgrades.
  • Develop change-management plans, lead prototyping and testing of new features, and recommend improvements to system operations and data availability.
  • Mentor Tier II technicians and junior security architects and engineers, lead technical discussions, and provide training recommendations.

Requirements

  • Ability to obtain, maintain, and access classified information at the Public Trust level.
  • Certified Splunk Architect certification.
  • Senior-level mastery of SIEM front-end and back-end operations and configurations, including interoperability with other security tools.
  • Extensive knowledge of Splunk Enterprise Security, CIM compliance, and Splunk Risk-Based Alerting.
  • Extensive knowledge of Linux-focused back-end engineering and administration, system data flows, network interconnections, and security event correlation.
  • Excellent troubleshooting, analytical, critical-thinking, communication, organizational, and multitasking skills, with the ability to work autonomously with minimal supervision.
  • Bachelor’s degree in Computer Science, Management of Information Systems, Cybersecurity, or a related mathematics or science discipline.
  • At least six years of experience in IT infrastructure, networking, architecture, administration, or security; six years of Splunk expertise; and at least three years of experience with large-scale enterprise solutions.
  • Experience with Splunk premium apps such as Enterprise Security and with architecting, developing, deploying, and configuring customized technical add-ons.

Nice to have

  • Additional Splunk certifications.
  • CEH, CySA+, GSEC, CISM, CCNA, Security+, Server+, Linux+, Cloud+, or equivalent higher-level certifications.
  • PERL, Linux shell scripting, and Regex experience.

Culture & Benefits

  • Full-time employment with medical, dental, and vision coverage.
  • 401(k) with immediate vesting, company life insurance, short- and long-term disability coverage, and basic life/AD&D benefits.
  • Paid time off, federal holiday observance, and employee assistance and legal-aid programs.
  • Family planning and fertility assistance.
  • Professional development, training, and development opportunities.
  • Drug-free workplace and equal employment opportunity practices, including disability and veteran inclusion.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →