Principal Security Operations Analyst

Parsons Corporation

20d

About The Position

Parsons is seeking a talented Principal Security Engineer to join our growing team! In this you will lead the design, architecture, and operation of enterprise cybersecurity tooling, with a strong emphasis on Splunk administration, architecture, and security analytics. You’ll be responsible for protecting systems, networks, and data through advanced security engineering, strategic planning, and operational excellence. The ideal candidate is a hands-on technical leader with deep experience in Splunk environments, Linux systems, and security architecture.

Requirements

10+ years of Splunk administration and architecture experience
10+ years of Linux OS administration and system architecture experience
Strong understanding of security threats, attack methodologies, networking, and operating systems
Excellent written and verbal communication skills with the ability to convey complex technical concepts to non-technical audiences
Ability to obtain and maintain a government security clearance
Splunk Certifications (One or More Required): Splunk Cloud Certified Admin, Splunk Enterprise Security Certified Admin, Splunk Accredited Splunk Cloud Fundamentals Consultant, Splunk Core Certified Consultant, Splunk Enterprise Certified Admin, Splunk Enterprise Certified Architect, Splunk Enterprise Cluster Administration

Nice To Haves

Experience supporting or leading SOC or SOC-adjacent teams
Deep knowledge of SIEM platforms, IDS/IPS, firewalls, proxies, and security monitoring tools
Experience with cloud platforms (AWS, Azure, GCP) and cloud security architectures
Familiarity with Infrastructure as Code (Terraform, Ansible)
Experience with containers and orchestration (Docker, Kubernetes)
Proficiency in scripting languages (Python, Bash, PowerShell)
Strong analytical, problem-solving, and data-driven decision-making skills

Responsibilities

Lead the design, administration, and optimization of Splunk environments for security monitoring, log management, and threat detection
Architect, implement, and maintain enterprise cybersecurity tools and platforms
Tune, monitor, and troubleshoot security tools to ensure performance, reliability, and scalability
Integrate security tools with third-party platforms, APIs, and cloud services
Administer and optimize Cribl for efficient data routing, filtering, and transformation
Conduct gap analyses and evaluate emerging security technologies
Collaborate with IT, SOC, and business teams to align security architecture with enterprise objectives
Develop technical documentation, standards, procedures, and security reports
Provide technical leadership and mentorship on security engineering best practices