Senior Splunk Engineer

Job description

The Senior Splunk Engineer supports the federal client by engineering, developing, deploying and maintaining the organization’s SIEM implementation and its minor applications, integration, apps and interfaces. This position possesses mastery of the Splunk tool, with technical expertise including hands-on solution development and implementation experience, and analytical skills for evaluating and optimizing capabilities of securing application solutions. The qualified candidate will be critical team member with proven leadership, communication, organizational and interpersonal skills. This position provides technical consulting support as well as advance technical design and specifications and planning process assistance, and must have the ability to multitask and solve complex technical problems. Chickasaw Nation Industries, Inc. serves as a holding company with multiple subsidiaries engaged in several lines of business (Business Services, Health, Infrastructure and Engineering, Mission Optimization, Technology and Transportation) for the federal government and commercial enterprises. A portion of our profits is used to support Chickasaw citizens. We are proud to support the economic development and long-term viability of the Chickasaw Nation and its people. CNI offers premium benefits eligible on the first day of hire to full time employees; (Medical - Dental – Vision), Company Life Insurance, Short-Term and Long-Term Disability Insurance, 401(K) Immediate Vesting, Professional Development Assistance, Legal Aid Assistance Program, Family Planning / Fertility Assistance, Personal Time Off, and Observance of Federal Holidays. As a federal contractor, CNI is a drug-free workplace and adheres to the Federal Controlled Substance Act. ESSENTIAL REQUIREMENTS The ability to obtain, maintain and access classified information at the Public Trust level. REQUIRED Certifications: Certified Splunk Architect Preferred Certifications: Additional Splunk certifications, CEH, CySA+, GSEC, CISM, CCNA, Security+, Server+, Linux+, Cloud+ (or equivalent higher-level certifications) Senior level mastery of SIEM front and back-end operations and configurations in addition to the interoperability with other security tools. Extensive knowledge of Splunk Enterprise Security and CIM compliance. Extensive knowledge of Splunk Risk Based Alerting (RBA). Cross functional and well-rounded. Firm understanding of data flows and interconnections between multiple system with the network environment. Exercises multi-tasking skills and critical thinking by managing events in multiple systems, applications, and other priorities. Extensive knowledge of system back-end engineer and administration with heavy focus on Linux. Analytical skills for evaluating and optimizing capabilities of securing application solutions. Systematic approach to remediate system issues/problems and making recommendations to improve the efficiency of system operations and data availability utilizing current and future technologies. Must demonstrate capability to operate autonomously in a diverse environment with minimal supervision and provide accurate and precise documentation. Must demonstrate excellent troubleshooting skills, and be self-motivated, results-driven, and well organized. Must have excellent communication skills (written and verbal) with experience communicating effectively with all levels of staff and management. Extensive experience with SIEM (Security Information and Event Management) systems, and security event correlation is required; PERL/Linux shell scripting/Regex experience is highly preferable. ESSENTIAL DUTIES AND RESPONSIBILITIES Essential duties and responsibilities include the following. Other duties may be assigned. Responsible for the integration of CNI Core Competencies into daily functions, including: commitment to integrity, knowledge/quality of work, supporting financial goals of the company, initiative/motivation, cooperation/relationships, problem analysis/discretion, accomplishing goals through organization, positive oral/written communication skills, leadership abilities, commitment to Affirmative Action, reliability/dependability, flexibility and ownership/accountability of actions taken. Implements, optimizes and maintains the SIEM infrastructure (Splunk), and deploys products, apps, reports, alerts and dashboards utilizing system development life cycle (SDLC) methodologies and business best practices. Increases the efficiency of the infrastructure to connect more enterprise data sources to Splunk Enterprise. Develops change management plans to be adaptable to the changing needs of the program. Leads prototyping and testing of new features and solutions. Manages and monitors Linux based on-prem server infrastructure for configuration and software upgrades. Develops, maintains and optimizes installation of internal and external SIEM components. Oversees the optimization, operation and health of Splunk components and connections to data sources. (Query scheduling, Performance tuning, Apps, Dashboards, Saved Searches, Scheduled Searches, Alerts, etc.). Provides mentoring to Tier II technicians for problem resolution and lead technical discussions with technical engineers of SIEM and SIEM data connections. Shares and provides knowledge to junior security architects and engineers and recommends training as needed. Brings industry best practices and innovative ideas leading to continuous improvement of the Splunk environment. EDUCATION / EXPERIENCE Bachelor's degree in Computer Science, Management of Information Systems, Cybersecurity or a related Math or Science discipline, and a minimum of six (6) years in IT infrastructure, networking, architecture, administration or security. Six (6) years of Splunk expertise, with at least three (3) years of experience in large scale enterprise-level solutions. Requires experience with Splunk premium apps, such as Enterprise Security, and with architecting, developing, deploying and configuring customized technical add-ons. PHYSICAL DEMANDS The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of this job. Work is primarily performed in an office/warehouse setting. Regularly required to use hands to finger, handle, or feel. Regularly required to reach with hands and arms, occasionally above head. Regularly required to twist at the waist, climb and descend stairs while carrying objects. Ability to speak and hear. Frequently required to stand, walk, stoop, kneel, crouch or crawl. Occasionally required to sit and climb or balance. Regularly lifts and/or moves up to twenty-five pounds and occasionally lifts and/or moves up to fifty pounds. Works near moving mechanical parts. Regularly exposed to general office and general office machinery noise. May be exposed to warehouse, truck or forklift noise. EOE including Disability/Vet The estimated pay range for this role is $125,000 to $150,000, with the final offer contingent on location, skillset, and experience. CNI offers a comprehensive benefits package that includes: Medical Dental Vision 401(k) Family Planning/Fertility Assistance STD/LTD/Basic Life/AD&D Legal-Aid Program Employee Assistance Program (EAP) Paid Time Off (PTO) Training and Development Opportunities Your application submission will be considered for all potential employment opportunities with Chickasaw Nation Industries (CNI). #INDREMOTE