• Implement, install, and troubleshoot Splunk Enterprise (SE) and Splunk Enterprise Security (ES) systems
• Maintain and administer SE and ES configurations, indexes, apps, and knowledge objects
• Monitor system health, capacity, and performance to proactively address issues
• Configure new data inputs to expand data collection capabilities
• Create security dashboards, reports, alerts, and notifications
• Collaborate with system administrators to enhance security monitoring capabilities
• Perform updates and patches on the Splunk platform
• Audit and review security practices to prevent security incidents
• Maintain documentation of system configurations and changes
Requirements
- High School Diploma
- At least 4+ years of system, network administration, or developer experience and 2+ years of Splunk administration
- A Bachelor's degree in Computer Science can be considered in lieu of the 4 years of system/network admin or developer experience
- IAW DoD -M, must meet the Intermediate Proficiency Level qualifications
- IAM-II Certification (one or more of the following): CISM, CISSP (OR ASSOCIATE), GSLC, CCISO, CAP, CASP+ CE, HCISSP
- Must have Splunk Enterprise Certified Admin credential
- Must have experience administering Linux servers
- Must have experience with SIEM Content Development
- Demonstrated experience of strong analytical and problem-solving skills
ATS Optimization Keywords
Below are skills and terms extracted directly from this job posting to improve Applicant Tracking System (ATS) visibility. This unique feature helps candidates tailor their applications more effectively — a feature exclusive to JobTailor job listings.
Hard Skills
- Splunk Enterprise
- Splunk Enterprise Security
- system administration
- network administration
- Linux servers
- SIEM Content Development
- security dashboards
- performance monitoring
- data collection
- troubleshooting
Soft Skills
- analytical skills
- problem-solving skills
- collaboration
- documentation
Certifications & Qualifications
- IAM-II Certification
- CISM
- CISSP
- GSLC
- CCISO
- CAP
- CASP+ CE
- HCISSP
- Splunk Enterprise Certified Admin