Prosyntix is currently recruiting for Splunk Security Engineer who will sit in either Rockville, MD or in Chantilly, VA area. This role would require a Secret Level Clearance.
The ideal candidate should have at least 5 years of enterprise Splunk administration experience, with 3 years' experience with Splunk ITSI experience, and 5 years of team leadership experience.
Must be an experienced Splunk administrator or engineer who has worked on Splunk IT Service Intelligence 4.0.4 and Splunk Enterprise Security 5.3.0.
Writing Splunk query language (SPL)
Installation and configuration of Splunk forwarders, Indexers, Deployment Servers, Search Heads and Deployers in Windows and Linux environments
Splunk data types and data ingestion
Splunk Alerts, Dashboard and query creation
Splunk certifications are a plus.
Excellent written and verbal communication skills.
The candidate will be responsible for managing the client's enhanced monitoring initiative using Splunk and Splunk IT Service Intelligence (ITSI) and reporting to the Splunk team lead.
The resource will provide Subject Matter Expertise (SME) support and operate Splunk Enterprise and Splunk ITSI using best practices.
The resource will be responsible for performing analysis on the existing program monitoring solutions and providing a roadmap for migration into Splunk Enterprise and ITSI.
The resource will develop automation, deployment, integration, and testing of the enhanced monitoring solutions using Splunk Enterprise and Splunk ITSI.
The resource will customize/fine-tune the Splunk ITSI solution along with the client to improve the monitoring of the client's systems as a Splunk search language (SPL) expert.
The resource will be responsible for designing Splunk dashboards, reports, alerts, and queries to support the daily operational and maintenance (O&M) staff as well as building new applications and services within ITSI.