Splunk SOAR Engineer - TS/SCI with FS Poly | McLean, VA

Optiv Security • Herndon, VA

248d

About The Position

A Splunk SOAR Engineer is an individual who can operate independently and will be entrusted with delivering success for Optiv + ClearShark's customers to achieve predetermined goals aligned with a statement of work. To be successful in this role, a Level I/III Engineer will be expected to specialize in a capability aligned with Optiv + ClearShark's service practices while also contemplating which future opportunities they would like to explore. Excellent communication skills are essential for this role, as these individuals will interact with clients regularly.

Requirements

• Active TS/SCI clearance with Full Scope polygraph required.
• Proven experience with Splunk SOAR (formerly Phantom) or similar security orchestration, automation, and response (SOAR) platforms.
• Strong background in developing and maintaining automation playbooks and scripts.
• Security Certification (i.e, Security+, CISSP, etc) required.
• Experience operating in classified environments.
• Bachelor's degree in a related area or at least 8 years of related work experience.
• Robust understanding of identity, SIEM, cybersecurity, and infrastructure concepts.
• Strong Linux and scripting (Python, Ansible, Teraform, JSON, others.) experience.
• Ability to troubleshoot Splunk instances.
• Create custom Splunk reports, dashboards, and content per customer requirements.
• Strong understanding of governance and compliance, specifically with FAR, DFARs, CUI and CMMC.
• Broad understanding of FedRAMP and IL constructs.
• Strong understanding of leadership concepts and ideas.
• Strong interpersonal skills and ability to work collaboratively in a team.
• Experience leading an engineering team, preferably having handled tasking, resolving personnel issues, and providing actionable feedback.
• Ability to clearly communicate complex messages to a variety of audiences.
• Excellent problem-solving skills with a keen attention to detail.
• Willingness to travel to meet client needs.
• Open to government workers and/or government experience.

Responsibilities

• Spend 5% of their time focusing on developing corporate strategy, assisting with brand identity, and support operations.
• Spend 5% of their time focusing on training and fine-tuning skills.
• Spend 10% of their time managing the day-to-day operations of their team members and their respective career development efforts.
• Spend 80% of their time on engagement delivery.
• Execute all tasks outlined in the scope of work and follow standard operating procedures with no direct oversight.
• Provide assistance for detailed view of notable events, workbook for open investigations, and risk analysis scoring system.
• Assist and recommend actions in security operations center tier I and tier II incident response incidents.
• Automate issue resolution and compliance reporting to lower time on detection, time on mitigation for security organizations.
• Integrate Splunk Mission Control, Splunk Security Orchestration, Automation Response (SOAR), and/or other customer approved security product applications utilizing Enterprise Security.
• Utilize data thresholds, trend-based conditions and behavioral pattern recognition.
• Develop and maintain strong relationships with clients to ensure satisfaction.
• Adhere to availability standards for responding to client inquiries.
• Lead the communication of technical concepts effectively to clients.
• Identify and communicate cross-sell and up-sell opportunities with the account team across services.

Benefits

• A company committed to championing Diversity, Equality, and Inclusion through our Employee Resource Groups.
• Work/life balance.
• Professional training resources.
• Creative problem-solving and the ability to tackle unique, complex projects.
• Volunteer Opportunities. 'Optiv Chips In' encourages employees to volunteer and engage with their teams and communities.
• The ability and technology necessary to productively work remotely/from home (where applicable).

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Industry: Professional, Scientific, and Technical Services
• Education Level: Bachelor's degree