Senior Splunk Security Engineer

Unity Technologies Corporation•Columbus, OH

2d•Onsite

About The Position

UnityTec is seeking a Senior Splunk Security Engineer to join their team. The role involves providing comprehensive information assurance and security engineering support by analyzing complex threat intelligence and integrating specialized methodologies to resolve enterprise system vulnerabilities. The engineer will also architect, administer, and develop customized threat-detection content within the Defense Logistics Agency's (DLA) Splunk Enterprise Log Management (ELM) environment to optimize data mining and empower incident response teams. This position is located in Columbus, OH.

Requirements

Relevant certification meeting DOD 8570/8140 IAT level III
Relevant certification meeting DOD 8570/8140 CND-IS
A minimum of seven (7) years of relevant IT experience
Computing Environment: Linux+
Splunk Administrator Experience
Experience creating custom dashboards and reports in Splunk using threat data.
Experience in the integration and sustainment of Splunk Core and Splunk Enterprise Security (ES).
Must be a U.S. citizen
Must possess a DoD current Secret clearance.

Responsibilities

Driving the integration of electronic processes and methodologies to resolve comprehensive system and technology challenges tied to Information Assurance (IA) requirements.
Providing end-to-end security engineering support across the entire system lifecycle, encompassing planning, design, development, testing, demonstration, and integration of secure information systems.
Applying rigorous analytical and systematic approaches to optimize workflow, organizational alignment, and project planning.
Conducting deep-dive analyses of threat information synthesized from a diverse array of sources, including system logs, Intrusion Detection Systems (IDS), formal intelligence reports, and vendor telemetry.
Providing actionable analysis and strategic recommendations that directly align with and support the operational mandates of Computer Emergency Response Team (CERT) Incident Handlers (IH) and site Information Assurance Managers (IAM).
Serving as a primary administrator for the DLA Splunk Enterprise Log Management (ELM) architecture and its associated backend database infrastructure.
Researching, planning, installing, configuring, troubleshooting, proactively maintaining, and executing backups for all architectural components of the Splunk ELM platform.
Executing critical system upgrades and daily maintenance routines for the Splunk ELM platform.
Utilizing Splunk Enterprise Security (ES) as a Security Information and Event Management (SIEM) platform to develop specialized rules, customized reports, data monitors, active channels, and trend analyses.
Designing and implementing customized dashboards and tailored use cases to identify emerging threats, optimize data mining operations across the DLA, and efficiently elevate high-threat items to critical incident responders.