Abrar Admin

Green Cloud Consulting

Green Cloud Consulting, LLC is seeking a Senior Splunk Engineer to join our team of qualified and diverse individuals. The qualified individual will be supporting our Department of Defense customer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity or national originThe selected candidate will lead Splunk platform operations, manage two Splunk Administrators, and drive the deployment, optimization, and sustainment of Splunk Enterprise, Splunk User Behavior Analytics (UBA), Splunk Security Orchestration, Automation, and Response (SOAR), and related monitoring and reporting capabilities.This role requires practical experience operating in secure, compliance-driven environments, strong leadership capabilities, and a proactive approach to system reliability, threat detection, and operational excellence.Key ResponsibilitiesSplunk Platform Management<ul><li>Install, configure, maintain, and troubleshoot Splunk Enterprise, UBA, and SOAR across on-premises and cloud/hybrid architectures.</li><li>Perform system upgrades, patching, and performance tuning to ensure platform stability and scalability.</li><li>Coordinate with infrastructure and cloud teams to support deployment and sustainment activities.</li><li>Oracle Cloud Infrastructure (OCI) experience is strongly preferred.</li></ul>UBA &amp; SOAR Optimization<ul><li>Customize and fine-tune UBA behavioral analytics models to enhance threat detection.</li><li>Design, configure, and maintain SOAR playbooks, integrations, and automated response workflows.</li><li>Optimize automated actions to accelerate incident response and reduce mean time to resolution (MTTR).</li></ul>Team Leadership &amp; Mentorship<ul><li>Supervise, mentor, and provide technical leadership to junior Splunk Administrators.</li><li>Delegate tasks, review deliverables, and support professional development aligned with mission objectives.</li><li>Foster a collaborative, high-performance team environment within a matrixed organization.</li></ul>Security &amp; Compliance<ul><li>Implement and maintain Splunk configurations in compliance with defense agency security policies and data retention requirements.</li><li>Apply STIGs and ensure continuous compliance with applicable cybersecurity controls.</li><li>Support audits, inspections, and security reviews as required.</li></ul>Incident Response &amp; Operations<ul><li>Respond to cybersecurity and operational incidents using logs, dashboards, and analytical reporting.</li><li>Proactively identify and remediate log ingestion, parsing, or analytics anomalies.</li><li>Support preventative monitoring and continuous improvement of detection capabilities.</li></ul>Collaboration &amp; Agile Delivery<ul><li>Participate in Agile development processes, including stand-ups, sprint planning, and retrospectives.</li><li>Use Jira for ticketing, backlog management, and documentation.</li><li>Collaborate across IT, cybersecurity, and mission teams to meet program and agency objectives.</li></ul>Documentation &amp; Knowledge Management<ul><li>Develop and maintain technical documentation, SOPs, runbooks, and knowledge base articles.</li><li>Share best practices and technical guidance across small, medium, and large cross-functional teams.</li></ul>Log Management &amp; Analytics<ul><li>Aggregate, parse, and normalize logs from diverse enterprise and defense data sources.</li><li>Develop and maintain dashboards, alerts, reports, and custom searches to provide actionable intelligence.</li><li>Ensure alignment with Splunk Common Information Model (CIM) standards.</li><li>Perform system upgrades, patching, and performance tuning to ensure platform stability and scalability.</li><li>Coordinate with infrastructure and cloud teams to support deployment and sustainment activities.</li><li>Oracle Cloud Infrastructure (OCI) experience is strongly preferred.</li></ul>QualificationsEducation &amp; Experience<ul><li>Bachelor&rsquo;s degree in Computer Science, Information Security, or related field (or equivalent experience).</li><li>6 years of hands-on Splunk experience to support cybersecurity and IT operations within a dynamic, mission-critical defense agency environment.</li><li>Experience supporting enterprise and cloud deployments (OCI experience strongly preferred).</li><li>Experience working in classified federal or DoD environments is a plus.</li><li>Proven experience designing, tuning, and optimizing Splunk searches, dashboards, alerts, and data models.</li><li>Experience integrating log sources common to defense and enterprise environments, including:</li></ul>Windows and Linux systemsNetwork devicesSecurity appliances<ul><li>Experience supporting Agile workflows and Jira-based project management.</li></ul>Technical Skills<ul><li>Strong knowledge of Windows Server and/or Linux administration.</li><li>Experience with Active Directory, LDAP, MFA integrations, and RBAC.</li><li>Familiarity with PowerShell or other scripting languages for automation.</li><li>Experience with SIEM tools (Splunk, QRadar, etc.) and log analysis.</li><li>In-depth knowledge of DoD security policies, STIGs, SRGs, and RMF processes.</li><li>Advanced expertise with Splunk Enterprise, UBA, SOAR, and related Splunk modules.</li><li>Strong scripting skills (e.g., Python, Bash) for automation and data manipulation.</li></ul>Certifications &amp; Competencies<ul><li>Splunk Certified Administrator (or higher)</li><li>Active DoD 8140-approved certification for privileged access (e.g., Security+, CISSP, or equivalent).</li><li>Demonstrated ability to lead a small technical team while coordinating with peer managers in a matrixed environment.</li><li>Strong analytical, troubleshooting, and problem-solving skills with attention to detail.</li><li>Excellent written and verbal communication skills with a customer-first mindset.</li><li>Proven ability to brief senior and executive leadership in both Federal and commercial environments (preferred).</li><li>Proactive, continuous learner who stays current on Splunk, cybersecurity, and security operations best practices.</li><li>Secret Security Clearance</li></ul>Benefits:<ul><li>Health Insurance</li><li>401K</li><li>Paid Leave</li></ul>Job Type: Full-timePay: $135,000.00 - $145,000.00 per yearBenefits:<ul><li>401(k)</li><li>401(k) matching</li><li>Dental insurance</li><li>Health insurance</li><li>Paid time off</li><li>Vision insurance</li></ul>Security clearance:<ul><li>Secret (Preferred)</li></ul>Work Location: Remote

Senior Splunk Engineer

Join Green Cloud Consulting and explore 1   exciting career opportunities. They're hiring for various roles with options for remote or on-site work. Apply today and become part of their innovative team.

Green Cloud Consulting

ABOUT_COMPANY

Senior Splunk Engineer