Splunk Engineer- TS Clearance

The Splunk Engineer is responsible for designing, implementing, and managing Splunk solutions to collect, analyze, and visualize data from various sources within government agencies. This role involves configuring Splunk environments, creating dashboards, and ensuring the effective use of Splunk’s capabilities to monitor, detect, and respond to security threats and operational insights. The Splunk Engineer collaborates closely with IT teams, security analysts, and stakeholders to optimize data intelligence and drive informed decision-making.

Essential Functions:

• Splunk Deployment and Configuration:

• Design and deploy Splunk environments, including configuring indexers, search heads, and forwarders, to support data collection and analysis needs.

• Optimize Splunk configurations to ensure efficient data storage, retrieval, and search capabilities.

• Data Collection and Integration:

• Develop data ingestion strategies, create data inputs, and set up data source integration for various log and event data types.

• Design and implement data normalization and transformation processes for consistent and accurate analysis.

• Dashboard and Visualization Development:

• Design and create interactive dashboards, reports, and visualizations using Splunk’s capabilities.

• Present data insights in a clear and actionable manner to support decision-making processes.

• Search Queries and Alerts:

• Develop and optimize search queries and alert mechanisms to proactively monitor for security threats, anomalies, and operational issues.

• Configure alerts to trigger automated responses or notifications based on predefined criteria.

• Splunk App Development:

• Build custom Splunk apps and add-ons to extend functionality and support specific agency requirements.

• Collaborate with development teams to integrate Splunk with other systems and tools.

• Security and Compliance:

• Implement security controls and best practices to protect data stored in Splunk and ensure compliance with relevant regulations and standards.

• Monitor and analyze security-related events to detect and respond to potential threats.

• Performance Optimization:

• Monitor system performance and troubleshoot issues related to data indexing, search performance, and resource utilization.

• Implement optimizations to enhance Splunk’s efficiency and responsiveness.

• Training and Documentation:

• Provide training and guidance to other team members on Splunk best practices, usage, and administration.

• Create documentation for configurations, processes, and troubleshooting procedures.

• US Citizen with an active Top Secret Security Clearance.

• Bachelor’s degree in Computer Science, or a related field plus 6 years of related experience.

• Proven experience in designing, deploying, and managing Splunk environments, preferably within government or enterprise environments.

• Strong understanding of data analytics, log management, and data visualization principles.

• Proficiency in Splunk query language (SPL) and the ability to develop complex search queries and reports.

• Knowledge of cybersecurity concepts, threat detection, and incident response strategies.

• Familiarity with security standards and regulations (NIST, FISMA, etc.) applicable to data analysis and storage.

• Excellent problem-solving skills and the ability to diagnose and resolve technical issues.

• Strong communication skills, both written and verbal, to convey technical concepts effectively.

PHYSICAL REQUIREMENTS & ENVIRONMENTAL CONDITIONS

• Inside office environment.

• Working on a computer for long periods of time.

• May involve long period of sitting at a desk.

• The work environment is fast-paced and sometimes involves extreme deadline pressures.

Founded in 2007 in Huntsville, AL, MartinFed provides the U.S. government with customer-focused, performance-based solutions using technology and an empowered workforce as an engine to drive its customers’ missions. Our goal is to attract the best and brightest within their field.

We invest in our people because they are our greatest asset. They cultivate our purpose, embody and reflect our core values, and define our culture. MartinFed’s core values that set us apart are the following:

• Be Driven - We are fueled by the hunger to learn more and do more.

• Be Curious - We engage in continuous improvement - never accepting the status quo.

• Be Humble - We seek honest feedback to strengthen our relationships.

• Pursue Excellence - We strive to achieve extraordinary results and do not settle for mediocrity.

Strive for excellence and consider joining our growing team today!