Senior Information System Security Engineer (Splunk Engineer)
About The Position
The Cybersecurity Risk Management Department within MITRE’s Global Security Division is hiring a Senior Information Systems Security Engineer focused on Splunk in classified environments. The role provides technical support and engineering for the security posture of computing systems in isolated enclaves, including high-performance computing environments and celestial and terrestrial labs. The engineer supports multiple sponsors and leads efforts to integrate security into large engineering projects and acquisition initiatives. The position involves administering and maintaining Splunk environments in collaboration with System Administrators and Information System Security Officers and Managers. The engineer works with logs from Windows, Linux, Palo Alto, and Cisco systems to ensure effective data ingestion, monitoring, troubleshooting, and the creation of dashboards and alerts. Responsibilities also include managing Splunk access and configuration, and analyzing, integrating, testing, operating, and maintaining Splunk system security. The engineer helps prepare for external security inspections and ensures compliance across department Splunk environments, including Security Technical Implementation Guide requirements and NIST 800-53 audit requirements. This position requires on-site work five days per week. The hired candidate must have or obtain a Top Secret/SCI/Polygraph clearance within one year of hire. Candidates must be U.S. citizens to be eligible for a security clearance.
Requirements
- Typically, at least five years of related experience with a bachelor’s degree; three years with a master’s degree; or a PhD with relevant experience and the ability to contribute immediately at this job step; an equivalent combination of related education and work experience is also accepted.
- Deep understanding of Splunk architecture, administration, and management on Linux and Windows infrastructure.
- Proficiency in scripting languages such as Python, Bash, or PowerShell for automating Splunk-related tasks.
- Strong analytical and problem-solving skills for troubleshooting complex issues in large-scale distributed systems.
- Hands-on experience with medium- to large-scale enterprise Splunk environments.
- Knowledge of classified infrastructure and the A&A process.
- Ability to communicate complex technical concepts clearly to technical and non-technical audiences.
- Initiative and ability to coordinate with stakeholders across multiple teams to complete projects.
- Must meet DoD 8570.01M IAM Level III requirements.
- Must have an active U.S. Government-issued Top Secret/SCI security clearance and be able to obtain and maintain a U.S. Government-issued Top Secret/SCI with Polygraph clearance.
- Must be a U.S. citizen to be considered for a security clearance.
- Must work on site five days per week.
Nice To Haves
- Active TS/SCI with CI Poly security clearance.
- Experience with SPL, data onboarding, custom apps, and creating visualizations.
- Knowledge of emerging IT and cybersecurity technologies.
- Experience with Windows, RHEL, virtualization, and networking in enterprise environments.
- Proven ability to advise senior leadership on risk levels, security posture, and policy changes.
- Previous experience as a SCI/SAP ISSO, ISSE, System Administrator, or ISSM.
- Strong analytical and problem-solving skills, including the ability to develop innovative solutions.
- Experience mentoring junior staff and fostering a collaborative team environment.
- Familiarity with insider threat programs and strategies for mitigating insider risks.
Responsibilities
- Design, deploy, and maintain Splunk environments, including clusters, indexers, and forwarders, with attention to availability, scalability, and performance.
- Identify and integrate data sources into Splunk, and create and manage data inputs, indexes, and source types.
- Develop custom dashboards, apps, reports, and alerts using SPL to visualize trends and provide actionable insights.
- Monitor Splunk environment health, troubleshoot issues, and optimize search performance and data retention policies.
- Gather requirements from end users, assist with searches, provide training on Splunk usage and best practices, and collaborate with IT, security, and other teams.
- Secure the Splunk environment, including managing updates, patching vulnerabilities, resolving STIGs, and supporting security event monitoring and incident response.
- Design and develop Splunk dashboards and alerts aligned with NIST 800-53 audit requirements.
- Manage Splunk user roles, permissions, authentication mechanisms, configuration files, data inputs, and forwarders.
- Analyze, integrate, test, operate, and maintain Splunk system security.
- Assist with external security inspections and ensure compliance across department Splunk environments.
- Collaborate with System Administrators and Information System Security Officers and Managers to maintain Splunk operations.
- Present findings, make actionable recommendations, and communicate innovative ideas to Senior Government Sponsors.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
