Senior Cyber Security Engineer (Splunk)
ExternalPrepare for this interview
EliteAI-generated questions, company research, and talking points tailored to this role
Responsibilities
- Splunk Administration: Manage the day-to-day operations of large enterprise Splunk deployments.
- Data Management: Troubleshoot data collection issues and ensure system stability and integrity.
- System Maintenance: Deploy and maintain both supported and unsupported Splunk add-ons.
- Upgrades and Patches: Execute Splunk Enterprise upgrades and apply necessary patches.
- Configuration and Deployment: Configure and deploy Splunk forwarders using centralized management tools.
- Security Enhancements: Maintain and tune Splunk Enterprise Security (ES) content and performance.
- Knowledge Management: Manage knowledge objects, data models, dashboards, alerts, and operational content.
- Integration Support: Support API integrations and external system connectivity.
- Documentation: Develop and maintain detailed engineering and compliance documentation.
- Collaboration: Work closely with cyber analysts and engineering teams to improve detection and response capabilities.
- Compliance: Apply relevant security policies, standards, and technical guidelines to ensure compliance.
- Access Controls: Enforce role-based access controls and operational security policies.
Requirements
- An active NRO TS/SCI with Poly.
- Bachelor's degree or 4+ additional years of cybersecurity experience in lieu of a degree.
- 5+ years of experience in an enterprise and/or cybersecurity-focused environment.
- Experience with Splunk administration and engineering.
- Experience with Splunk Enterprise Security (ES) operations and configurations.
- Proficiency with Unix and Windows environments.
- DoD 8570 IAT Level II certification (e.g., Security+, CCNA-Security, GSEC).
- Splunk certifications such as Architect, Consultant I/II, Admin, or Power User.
- Experience with scripting or programming languages (e.g., Bash, Python, Java, Perl, .NET).
- Familiarity with developing and deploying operational and security use cases within Splunk.
- Physical Requirements:
- Must be able to remain in a stationary position 50% of the time.
- Occasionally move about inside the office to access file cabinets, office machinery, or to communicate with co-workers, management, and customers via email, phone, or virtual communication, which may involve delivering presentations.
- Ready to Take the Next Step in Your Career?
- Apply now and join a team where your skills and expertise will be valued and make a real difference in the world of cybersecurity!
- -
- What You Can Expect:
- A culture of integrity.
- At CACI, we place character and innovation at the center of everything we do. As a valued team member, you'll be part of a high-performing group dedicated to our customer's missions and driven by a higher purpose - to ensure the safety of our nation.
- An environment of trust.
- CACI values the unique contributions that every employee brings to our company and our customers - every day. You'll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.
- A focus on continuous growth.
- Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground - in your career and in our legacy.
- Pay Range :
Benefits
Additional Information
Job Title: Senior Cyber Security Engineer (Splunk) Job Category: Information Technology Time Type: Full time Minimum Clearance Required to Start: TS/SCI with Polygraph Employee Type: Regular Percentage of Travel Required: Up to 10% Type of Travel: Local * * * Exciting Opportunity: Senior Cyber Security Engineer (Splunk) - Chantilly, VA Join Our Dynamic Team and Make a Difference! Are you a passionate and skilled Cyber Security Engineer with a knack for Splunk? We're looking for a Senior Cyber Security Engineer (Splunk) to become a vital part of our team in Chantilly, VA. This is your chance to contribute to a mission-critical initiative and directly impact cybersecurity operations through the administration and engineering of a large enterprise Splunk environment. Why You'll Love This Role: Impactful Work: Be at the forefront of cyber defense, supporting critical initiatives and enhancing our enterprise's security posture. Collaborative Environment: Work alongside talented technical teams and cyber analysts in a vibrant and dynamic setting. Professional Growth: Leverage your expertise and continue to develop your skills in a challenging and rewarding environment.
Your Match
How well this role fits your profile.
Company Intel
What employees say
Worked at CACI? Share your experience