Description
Job Description:
The candidate is responsible for design, develop, maintain and establish and maintain the configuration and technical support for multiple new clients being monitored. Interface with the client in the strategic design process to integrate security and IT operations with business requirements and technical design. Provide guidance/direction to customer on how to best get value from Splunk products.
Primary Responsibilities:
Enforce best practices for data and Splunk administration
Design the Splunk system solution for incident response to meet growth while maintaining a balance between performance, stability, scalability and agility
Provide engineering and design support for a large distributed Splunk environment consisting of heavy forwarders, indexers, search head servers, spanning security, performance and operational roles
Be proficient in onboarding data into Splunk via forwarders, scripted inputs, TCP/UDP and modular inputs from sources such as FireEye, Bid IP, Cisco, Syslog, etc.
Be familiar with recognizing and onboarding new data sources into Splunk
Investigate data for anomalies and trends
Build dashboards highlighting the key trends of the data
Enforce best practices related to summarizing and query data into reports and dashboards with visual metrics for stakeholders
Develop advanced scripts for the manipulation of multiple data repositories to support analysts' requirements
Work with other enterprise teams to support data capture and forecasting efforts to support proactive identification of issues
Provide recommendations and implement changes to optimize Splunk products in the customer environment
Understand customer requirements to design and implement appropriate Splunk solutions
Develop and implement innovative Splunk based solutions
Conduct investigations for root cause analysis of problems or issues
Communicate with team members and customers
Perform integration activities to connect with 3rd party software APIs
Plan and direct systems upgrades
Design system enhancements and monitor capacity to maintain operational capacity following change management processes
Determine system specifications input/output process and working parameters for hardware/software compatibility
Provide industry standard expertise in the deployment, configuration and operation of Splunk and Splunk enterprise security
Required Skills and Experience:
Bachelor’s degree in related discipline or equivalent training and/or experience
12+ years’ experience
Active/current TS/SCI clearance with polygraph
Proficient in parsing data including hosts, source type, line breaks, time stamps and RegEx transforms
Experience with infrastructure management and support, and system administration in the Windows and UNIX/LINUX environments
Experience with Splunk dashboard creation
Experience and proficient deploying and building Splunk technical add-ons
Complete command of Splunk products
Experience working with structured data formats such as JSON, XML, Log4j and Syslog
Proficient with ReGex and Data Log Field Extraction
Proficient creating and working with Splunk data models.
Proficient in LINUX CLI
Desired Qualifications
Splunk Certified Power User Certification, Splunk Certified Administrator Certification
Advanced understanding of specific enterprise environments that direct the correlation of system data for mission impact
Custom log file parsing
Experience with Splunk dashboard creation
Experience creating visualizations for displaying data
Knowledge of networking protocols
Database design and Management
IC experience desired
Experience with custom scripting desired: Bash, Perl, Shell, PowerShell, Python, JavaScript, HTML, CSS, SQL, D3
Experience writing Splunk queries in Splunk Programming Language (SPL)
Pay Range:
Covid Guidance
In order to enter Leidos facilities in the U.S. and to attend Leidos events outside our facilities, employees are required to be vaccinated for COVID-19 or maintain proof of a negative COVID-19 test within 96 hours of entry. In addition, we are receiving guidance from certain customers that onsite contractor personnel will need to be fully vaccinated to access customer facilities. If you are not vaccinated, please consider getting your COVID-19 vaccination as soon as possible. If you have any questions, please contact your Talent Acquisition POC.
About Leidos
Leidos is a Fortune 500® technology, engineering, and science solutions and services leader working to solve the world’s toughest challenges in the defense, intelligence, civil, and health markets. The company’s 43,000 employees support vital missions for government and commercial customers. Headquartered in Reston, Virginia, Leidos reported annual revenues of approximately $13.7 billion for the fiscal year ended December 31, 2021. For more information, visit www.Leidos.com.
Pay and Benefits
Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available here.
Securing Your Data
Leidos will never ask you to provide payment-related information at any part of the employment application process. And Leidos will communicate with you only through emails that are sent from a Leidos.com email address. If you receive an email purporting to be from Leidos that asks for payment-related information or any other personal information, please report the email to [email protected].
Commitment to Diversity
All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.
