Senior Cyber Security Engineer (Splunk)

CACI•Chantilly, VA

20h•Onsite

About The Position

This is an exciting opportunity for a Senior Cyber Security Engineer (Splunk) to become a vital part of our team in Chantilly, VA. This role contributes to a mission-critical initiative and directly impacts cybersecurity operations through the administration and engineering of a large enterprise Splunk environment. The role offers impactful work at the forefront of cyber defense, supporting critical initiatives and enhancing the enterprise's security posture. It provides a collaborative environment working alongside talented technical teams and cyber analysts, and opportunities for professional growth in a challenging and rewarding environment.

Requirements

An active NRO TS/SCI with Poly.
Bachelor’s degree or 4+ additional years of cybersecurity experience in lieu of a degree.
5+ years of experience in an enterprise and/or cybersecurity-focused environment.
Experience with Splunk administration and engineering.
Experience with Splunk Enterprise Security (ES) operations and configurations.
Proficiency with Unix and Windows environments.
DoD 8570 IAT Level II certification (e.g., Security+, CCNA-Security, GSEC).

Nice To Haves

Splunk certifications such as Architect, Consultant I/II, Admin, or Power User.
Experience with scripting or programming languages (e.g., Bash, Python, Java, Perl, .NET).
Familiarity with developing and deploying operational and security use cases within Splunk.

Responsibilities

Manage the day-to-day operations of large enterprise Splunk deployments.
Troubleshoot data collection issues and ensure system stability and integrity.
Deploy and maintain both supported and unsupported Splunk add-ons.
Execute Splunk Enterprise upgrades and apply necessary patches.
Configure and deploy Splunk forwarders using centralized management tools.
Maintain and tune Splunk Enterprise Security (ES) content and performance.
Manage knowledge objects, data models, dashboards, alerts, and operational content.
Support API integrations and external system connectivity.
Develop and maintain detailed engineering and compliance documentation.
Work closely with cyber analysts and engineering teams to improve detection and response capabilities.
Apply relevant security policies, standards, and technical guidelines to ensure compliance.
Enforce role-based access controls and operational security policies.