Splunk Consultant -Active (TS/SCI with a CI Poly)

Vibrint•Reston, VA

1d•$140,000 - $170,000

About The Position

Vibrint is a trusted provider of mission-critical systems and analysis that transform our customers' capacity and capability in harvesting and harnessing data. Working alongside many of the most talented professionals in public service, we work tirelessly to create and sustain new solutions and services that meet the stringent demands across a variety of customer missions. Our people know they'll be doing work that matters at the heart of the national security mission, exploring new possibilities at the cutting edge of technology. They know they will be well-rewarded and recognized for their commitment. Our people know they will enjoy plentiful opportunities to grow, thrive, and have fun as a member of the Vibrint family. Join Vibrint, where your career is a priority, and your future is our shared goal.

Requirements

Minimum of four (4) years of experience serving as a Splunk Subject Matter Expert (SME), Solutions Architect, Senior Engineer, or similar role supporting enterprise security operations, SIEM, or cybersecurity initiatives within Federal Government or Intelligence Community (IC) environments.
Demonstrated hands-on experience designing, implementing, administering, documenting and optimizing Splunk Enterprise and Splunk Enterprise Security (ES) environments.
Experience assessing Splunk architecture and environment health, including data ingestion, indexing, search performance, capacity, configuration, and platform optimization, with the ability to develop actionable recommendations.
Experience designing and configuring specialized SOC dashboards, searches, alerts, reports, data models, and security use cases aligned to customer mission requirements.
Experience developing environment-specific as-built documentation, operational runbooks, and knowledge-management materials to support ongoing Splunk Operations & Maintenance (O&M).
Experience conducting structured knowledge transfer and workforce training to enable customer administrators to assume day-to-day Splunk O&M responsibilities.
Ability to provide senior-level Tier 3/4 architectural guidance, troubleshooting, and technical escalation support.
Excellent written and verbal communication skills with the ability to communicate technical findings, architectural recommendations, operational procedures, and training content to engineering teams and customer stakeholders.
Bachelor's degree in Computer Science, Information Systems, Engineering, Cybersecurity, or a related technical discipline, or equivalent experience.
TS/SCI with a CI Poly

Nice To Haves

Experience supporting Splunk Enterprise Security within a Security Operations Center (SOC) and translating mission requirements into effective security monitoring and operational workflows.
Experience leading Splunk platform assessments, optimization efforts, or O&M transition activities for Federal Government or Intelligence Community customers.
Experience supporting highly regulated or classified environments.
Relevant Splunk certifications, such as Splunk Core Certified Power User, Splunk Enterprise Certified Admin, Splunk Enterprise Certified Architect, or Splunk Enterprise Security Certified Admin.

Responsibilities

Serving as a Splunk Subject Matter Expert (SME), Solutions Architect, Senior Engineer, or similar role supporting enterprise security operations, SIEM, or cybersecurity initiatives within Federal Government or Intelligence Community (IC) environments.
Designing, implementing, administering, documenting and optimizing Splunk Enterprise and Splunk Enterprise Security (ES) environments.
Assessing Splunk architecture and environment health, including data ingestion, indexing, search performance, capacity, configuration, and platform optimization, with the ability to develop actionable recommendations.
Designing and configuring specialized SOC dashboards, searches, alerts, reports, data models, and security use cases aligned to customer mission requirements.
Developing environment-specific as-built documentation, operational runbooks, and knowledge-management materials to support ongoing Splunk Operations & Maintenance (O&M).
Conducting structured knowledge transfer and workforce training to enable customer administrators to assume day-to-day Splunk O&M responsibilities.
Providing senior-level Tier 3/4 architectural guidance, troubleshooting, and technical escalation support.
Communicating technical findings, architectural recommendations, operational procedures, and training content to engineering teams and customer stakeholders.