Assistant Splunk Admin Jobs (NOW HIRING)

Job Summary:
MITRE is a not-for-profit corporation dedicated to tackling the nation's toughest challenges, particularly in cybersecurity and technology. The Lead Cyber Risk Manager (Splunk Engineer) will provide technical support and engineering for computing systems in classified environments, focusing on integrating security into engineering projects and ensuring compliance with security standards.
Responsibilities:
• Collaborate with System Administrators and Information System Security Officers to maintain the operations of Splunk environments.
• Work with logs from Windows, Linux, and Cisco devices to ensure proper data ingestion into Splunk, enabling effective monitoring, troubleshooting, and the creation of actionable dashboards and alerts to support operational and security objectives.
• Demonstrate strong problem-solving skills to develop appropriate mitigation strategies and ensure Splunk systems are configured and operated in compliance with Security Technical Implementation Guides (STIG) requirements.
• Manage Splunk user roles, permissions, authentication mechanisms, configuration files, data inputs, and forwarders.
• Be responsible for the analysis, integration, testing, operations, and maintenance of Splunk system security.
• Assist during external security inspections and ensure compliance for all department Splunk environments.
• Design, deploy, and maintain Splunk environments, including clusters, indexers, and forwarders, ensuring high availability, scalability, and performance.
• Identify and integrate new data sources into Splunk, creating and managing data inputs, indexes, and source types.
• Develop custom dashboards, reports, and alerts using SPL to visualize trends and provide actionable insights.
• Monitor the health of the Splunk environment, troubleshoot issues, and optimize search performance and data retention policies.
• Work with end-users to gather requirements, assist with searches, and provide training on Splunk usage and best practices.
• Ensure the security of the Splunk environment, which can include managing security updates, patching vulnerabilities, and using Splunk for security event monitoring and incident response.
• Design and develop Splunk dashboards and alerts that align with NIST 800-53 audit requirements to ensure compliance with federal security standards and provide actionable insights for monitoring and reporting.
Qualifications:
Required:
• Typically requires a minimum of 8 years of related experience with a Bachelor’s degree; or 6 years and a Master’s degree; or a PhD with 3 years’ experience; or equivalent combination of related education and work experience.
• Deep understanding of Splunk architecture, administration, and management.
• Proficiency in scripting languages like Python, Bash, or PowerShell is required for automation and advanced tasks related to Splunk.
• Strong analytical and problem-solving skills to troubleshoot complex issues in large scale distributed systems.
• Hands-on experience with large-scale enterprise Splunk environments.
• Knowledge of classified infrastructure and the A&A process.
• Ability to communicate complex technical concepts clearly to both technical and non-technical audiences.
• Must meet DoD 8570.01M IAM Level III requirements.
• Active Top Secret clearance with SCI eligibility. Ability to obtain and maintain a Counterintelligence Polygraph (CI Poly).
• Per the U.S. Government’s eligibility requirements, you must be a U.S Citizen to be considered for a security clearance.
• This position has an on-site requirement of 5 days a week on-site.
Preferred:
• Experience in SPL, data onboarding, and creating visualizations.
• Knowledge of emerging IT and cybersecurity technologies.
• Proven ability to advise senior leadership on risk levels, security posture, and policy changes.
• Previous experience operating as a SCI/SAP ISSO, ISSE, System Administrator, or ISSM.
• Strong analytical and problem-solving skills, with the ability to develop innovative solutions.
• Experience mentoring junior staff and fostering a collaborative team environment.
• Familiarity with insider threat programs and strategies for mitigating insider risks.
Company:
MITRE is a not-for-profit organization that operates research and development centers. Founded in 1958, the company is headquartered in Bedford, USA, with a team of 5001-10000 employees. The company is currently Late Stage.