Enterprise Logging Solution Lead

• Guide the evolution of CBP's enterprise-wide SIEM and logging architecture, one of the most critical capabilities supporting 24/7 SOC operations.
• Shape how CBP ingests, analyzes, and operationalizes massive volumes of security telemetry across cloud and on-prem environments, enabling threat detection, audit readiness, and realtime security insights.
• Engineer advanced logging pipelines, lead implementations of new data sources, develop dashboards used by mission owners and executives, and modernize SIEM capabilities that directly support national security operations.

Cyber Defense,Information Assurance,Information Technology Security,System Security,Systems Engineering

Certifications:

Splunk Enterprise Certified Architect | Splunk - Splunk, Certified Information Systems Security Professional (CISSP) | International Information System Security Certification Consortium (ISC2) - International Information System Security Certification Consortium (ISC2)

Experience:

5 + years of related experience, * Secret withTop Secret eligibilityclearancerequired.

• Minimumof five (5)last years of experience serving as a senior Certified Splunk Administrator or Architect.
• Understandingand practical experience in applying project management principles.
• Experience with interconnected, heterogeneous systems.
• Strong understanding of industry standards and technologies with experience in the application supporting a Federal Government security operations organization.
• Experience in an enterprise IT environment as an applications or systems administrator working in Windows and Linux environments.
• Experience with Linux or Windows scripting languages and automation.
• Strong networkingbackgroundandsecurity background.
• Experience with cloud orchestration tools and a strong understanding of Amazon Web Services cloud.
• One of the following certifications (listed inorder ofpreference): Certified Splunk Architect (II) or Certified Information System Security Professional (CISSP)

EDUCATION AND EXPERIENCE

• Bachelor'sdegree in computer science, information technology, or related fieldpreferred.
• Previousor Current CBP Background Investigationpreferred.

The likely salary range for this position is $136,000 - $184,000. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.

Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave. To ensure our employees are able to protect their income, other offerings such as short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available. We regularly review our Total Rewards package to ensure our offerings are competitive and reflect what our employees have told us they value most.

The U.S. Customs and Border Protection (CBP) Cyber Security Directorate (CSD) is leading one of the most comprehensive, mission critical cybersecurity operations in the federal government-protecting the digital infrastructure that safeguards America's borders. This multifaceted program spans 24/7/365 Security Operations Center (SOC) monitoring, advanced threat intelligence, forensics, incident response, cloud and network security engineering, zero trust modernization, vulnerability assessment, and enterprise-wide risk and compliance activities. Key Leads on this program will guide teams at the forefront of national security, supporting sophisticated cyber operations that defend vital systems, enable secure mission execution, and counter rapidly evolving threats. You will find this work uniquely impactful, fast-paced, and deeply collaborative, offering the opportunity to lead high performing technical teams, shape CBP's cybersecurity strategy, and contribute directly to the protection of the, We are GDIT. A global technology and professional services company that delivers consulting, technology and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50 countries worldwide, offering leading capabilities in digital modernization, AI/ML, Cloud, Cyber and application development. Together with our clients, we strive to create a safer, smarter world by harnessing the power of deep expertise and advanced technology. Join our Talent Community to stay up to date on our career opportunities and events at https://gdit.com/tc.