Splunk Consultant -Active (TS/SCI with a CI Poly)

• Minimum of four (4) years of experience serving as a Splunk Subject Matter Expert (SME), Solutions Architect, Senior Engineer, or similar role supporting enterprise security operations, SIEM, or cybersecurity initiatives within Federal Government or Intelligence Community (IC) environments.
• Demonstrated hands-on experience designing, implementing, administering, documenting and optimizing Splunk Enterprise and Splunk Enterprise Security (ES) environments.
• Experience assessing Splunk architecture and environment health, including data ingestion, indexing, search performance, capacity, configuration, and platform optimization, with the ability to develop actionable recommendations.
• Experience designing and configuring specialized SOC dashboards, searches, alerts, reports, data models, and security use cases aligned to customer mission requirements.
• Experience developing environment-specific as-built documentation, operational runbooks, and knowledge-management materials to support ongoing Splunk OperationsMaintenance (O&M).
• Experience conducting structured knowledge transfer and workforce training to enable customer administrators to assume day-to-day Splunk O&M responsibilities.
• Ability to provide senior-level Tier 3/4 architectural guidance, troubleshooting, and technical escalation support.
• Excellent written and verbal communication skills with the ability to communicate technical findings, architectural recommendations, operational procedures, and training content to engineering teams and customer stakeholders.
• Bachelor’s degree in Computer Science, Information Systems, Engineering, Cybersecurity, or a related technical discipline, or equivalent experience.

Desired Skills

• Experience supporting Splunk Enterprise Security within a Security Operations Center (SOC) and translating mission requirements into effective security monitoring and operational workflows.
• Experience leading Splunk platform assessments, optimization efforts, or O&M transition activities for Federal Government or Intelligence Community customers.
• Experience supporting highly regulated or classified environments.
• Relevant Splunk certifications, such as Splunk Core Certified Power User, Splunk Enterprise Certified Admin, Splunk Enterprise Certified Architect, or Splunk Enterprise Security Certified Admin.

Qualifications: TS/SCI + CI Poly

The pay range for this position is a general guideline only and not a guarantee of compensation or salary. Our approach to crafting offers considers various factors to provide an equitable and competitive comprehensive compensation package. These considerations include, but are not limited to, contracted rates, education, certification(s), experience, specific competencies required for this position, and geographic location.

Vibrint’s comprehensive compensation package includes but is not limited to: competitive salary; annual merit-based salary increase and discretionary bonus program; 401(k) plan with a company contribution; 11 paid federal holidays; 160 hours of paid time off; medical, dental, vision, life and short-long-term disability insurance; employee assistance program; and a generous professional development allowance.

Vibrint is a trusted provider of mission-critical systems and analysis that transform our customers’ capacity and capability in harvesting and harnessing data. Working alongside many of the most talented professionals in public service, we work tirelessly to create and sustain new solutions and services that meet the stringent demands across a variety of customer missions.

Our people know they’ll be doing work that matters at the heart of the national security mission, exploring new possibilities at the cutting edge of technology. They know they will be well-rewarded and recognized for their commitment. Our people know they will enjoy plentiful opportunities to grow, thrive, and have fun as a member of the Vibrint family. Join Vibrint, where your career is a priority, and your future is our shared goal.