Senior Splunk Engineer

Chickasaw Nation Industries, Inc.

3d•$125,000 - $150,000•Remote

About The Position

The Senior Splunk Engineer supports the federal client by engineering, developing, deploying and maintaining the organization’s SIEM implementation and its minor applications, integration, apps and interfaces. This position possesses mastery of the Splunk tool, with technical expertise including hands-on solution development and implementation experience, and analytical skills for evaluating and optimizing capabilities of securing application solutions. The qualified candidate will be critical team member with proven leadership, communication, organizational and interpersonal skills. This position provides technical consulting support as well as advance technical design and specifications and planning process assistance, and must have the ability to multitask and solve complex technical problems. Chickasaw Nation Industries, Inc. serves as a holding company with multiple subsidiaries engaged in several lines of business (Business Services, Health, Infrastructure and Engineering, Mission Optimization, Technology and Transportation) for the federal government and commercial enterprises. A portion of our profits is used to support Chickasaw citizens. We are proud to support the economic development and long-term viability of the Chickasaw Nation and its people. CNI offers premium benefits eligible on the first day of hire to full time employees; (Medical - Dental – Vision), Company Life Insurance, Short-Term and Long-Term Disability Insurance, 401(K) Immediate Vesting, Professional Development Assistance, Legal Aid Assistance Program, Family Planning / Fertility Assistance, Personal Time Off, and Observance of Federal Holidays. As a federal contractor, CNI is a drug-free workplace and adheres to the Federal Controlled Substance Act.

Requirements

The ability to obtain, maintain and access classified information at the Public Trust level.
Certified Splunk Architect
Senior level mastery of SIEM front and back-end operations and configurations in addition to the interoperability with other security tools.
Extensive knowledge of Splunk Enterprise Security and CIM compliance.
Extensive knowledge of Splunk Risk Based Alerting (RBA).
Cross functional and well-rounded. Firm understanding of data flows and interconnections between multiple system with the network environment.
Exercises multi-tasking skills and critical thinking by managing events in multiple systems, applications, and other priorities.
Extensive knowledge of system back-end engineer and administration with heavy focus on Linux.
Analytical skills for evaluating and optimizing capabilities of securing application solutions.
Systematic approach to remediate system issues/problems and making recommendations to improve the efficiency of system operations and data availability utilizing current and future technologies.
Must demonstrate capability to operate autonomously in a diverse environment with minimal supervision and provide accurate and precise documentation.
Must demonstrate excellent troubleshooting skills, and be self-motivated, results-driven, and well organized.
Must have excellent communication skills (written and verbal) with experience communicating effectively with all levels of staff and management.
Extensive experience with SIEM (Security Information and Event Management) systems, and security event correlation is required; PERL/Linux shell scripting/Regex experience is highly preferable.
Bachelor's degree in Computer Science, Management of Information Systems, Cybersecurity or a related Math or Science discipline, and a minimum of six (6) years in IT infrastructure, networking, architecture, administration or security.
Six (6) years of Splunk expertise, with at least three (3) years of experience in large scale enterprise-level solutions.
Requires experience with Splunk premium apps, such as Enterprise Security, and with architecting, developing, deploying and configuring customized technical add-ons.

Nice To Haves

Additional Splunk certifications
CEH
CySA+
GSEC
CISM
CCNA
Security+
Server+
Linux+
Cloud+ (or equivalent higher-level certifications)

Responsibilities

Responsible for the integration of CNI Core Competencies into daily functions, including: commitment to integrity, knowledge/quality of work, supporting financial goals of the company, initiative/motivation, cooperation/relationships, problem analysis/discretion, accomplishing goals through organization, positive oral/written communication skills, leadership abilities, commitment to Affirmative Action, reliability/dependability, flexibility and ownership/accountability of actions taken.
Implements, optimizes and maintains the SIEM infrastructure (Splunk), and deploys products, apps, reports, alerts and dashboards utilizing system development life cycle (SDLC) methodologies and business best practices.
Increases the efficiency of the infrastructure to connect more enterprise data sources to Splunk Enterprise.
Develops change management plans to be adaptable to the changing needs of the program. Leads prototyping and testing of new features and solutions.
Manages and monitors Linux based on-prem server infrastructure for configuration and software upgrades.
Develops, maintains and optimizes installation of internal and external SIEM components.
Oversees the optimization, operation and health of Splunk components and connections to data sources. (Query scheduling, Performance tuning, Apps, Dashboards, Saved Searches, Scheduled Searches, Alerts, etc.).
Provides mentoring to Tier II technicians for problem resolution and lead technical discussions with technical engineers of SIEM and SIEM data connections.
Shares and provides knowledge to junior security architects and engineers and recommends training as needed.
Brings industry best practices and innovative ideas leading to continuous improvement of the Splunk environment.