Splunk Security Engineer

Advance your career while impacting our national security in cyber as a Splunk Security Engineer at GDIT. Here, technologists have many paths to grow a meaningful career supporting cyber missions and operations across the federal government.

As a Splunk Security Engineer, the work you’ll do at GDIT will be impactful to the mission of NATO SOFCOM. You will play a crucial role in providing Senior SIEM Engineering, Splunk Enterprise Security Administration, security data onboarding, and cyber analytics in support of NATO SOFCOM networks.

Responsibilities:

• Administer and optimize Splunk Enterprise Security, indexers, search heads, forwarders, deployment servers, indexes and license consumption.
• Develop and tune SPL queries, correlation searches, dashboards, alerts, security analytics and threat-detection use cases mapped to relevant tactics and techniques.
• Onboard and normalize authorized log sources, maintain Common Information Model mappings and validate log quality, integrity and retention.
• Support threat hunting, event triage, incident investigations, evidence collection and coordination with the cybersecurity team.
• Document approved configuration changes, operating procedures, deployment architecture, incident findings and SIEM health metrics.
• Support NATO/DoW compliance reporting and continuous improvement of detection coverage, with execution of changes through approved procedures.
• Design and develop solutions for customer systems and networks.

Requirements:

• Education: BA/BS or equivalent years of experience
• Experience: 5+ years of related experience
• Technical skills: Splunk, SPL queries, CIM tuning, Dashboard customization
• Certifications: IAT Level II or higher, Splunk Enterprise Certified Admin or Splunk Enterprise Security Certified Admin, and ITIL Foundation (within 90 days of hire)
• Security clearance level: Active Secret required to start
• Location: On-site in Mons, Belgium

Benefits:

• Growth: AI-powered career tool that identifies career steps and learning opportunities
• Support: An internal mobility team focused on helping you achieve your career goals
• Rewards: Comprehensive benefits and wellness packages, 401K with company match, and competitive pay and paid time off
• Community: Award-winning culture of innovation and a military-friendly workplace