Splunk Enterprise Security (ES) Consultant

Stem

Reston, VA, United States

about 1 month ago

Apply on www.clearancejobs.com

Prepare application

Role details

Contract type

Permanent contract

Employment type

Full-time (> 32 hours)

Working hours

Regular working hours

Job source

www.clearancejobs.com

Tech stack

Intrusion Detection and Prevention Information Systems Security Architecture Professional Python (Programming Language) Windows PowerShell Security Information and Event Management Scripting Kubernetes Cybercrime Splunk Security Orchestration, Automation & Response

Job description

Assess existing Splunk ES environments and implement Splunk best practices.
Design secure architectures and integrate enterprise security tools.
Support Splunk migration to Kubernetes.
Configure, administer, and optimize Splunk Enterprise Security (ES).
Normalize data for CIM compliance and onboard new data sources.
Develop and tune correlation searches, dashboards, and risk-based alerting.
Improve SIEM performance by reducing false positives and optimizing searches.
Support incident response, threat hunting, and security analytics.
Automate workflows using Splunk SOAR and Mission Control.
Develop strategic recommendations and roadmaps for Splunk ES modernization.

Requirements

Active TS/SCI with CI Polygraph.
U.S. Citizenship.
Splunk Core Consultant Certification.
Splunk Enterprise Security Certification.
Experience administering and optimizing Splunk Enterprise Security in enterprise environments.
Knowledge of CIM, SIEM architecture, threat detection, incident response, and security automation.
Experience with Kubernetes, Splunk SOAR, Mission Control, and scripting (Python or PowerShell) is highly desired.