Senior Splunk Administrator

Job not on LinkedIn

🔥 0 minutes ago

🇺🇸 United States – Remote

💵 $140k - $170k / year

⏰ Full Time

🟠 Senior

🖥️ Administration

👻 Ghost score 1%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Valiant Solutions

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2005

💼 Consulting

🎖️ Defense

🔒 Cybersecurity

Consulting • Defense • Cybersecurity

Valiant Solutions is a cybersecurity and IT services firm that specializes in securing the future by providing comprehensive and customized solutions to challenges faced by the Federal Government. With a focus on security engineering, operations, and strategic risk governance, the company addresses complex information security challenges through innovative application development and enterprise architecture. Recognized for its commitment to excellence, Valiant Solutions has been awarded numerous contracts and honors for its impactful contributions in the cybersecurity field.

📋 Description

• Design, develop and implement processes for ingesting data from various sources into Splunk, including HEC, Splunk Stream, Technical Add-Ons, Universal Forwarder Collections, custom APIs and other ingest mechanisms • Configure and manage data inputs for logs, metrics, and events to determine compliance with M-26-14 requirements at the FISMA system boundary level • Establish and maintain secure and reliable connections between Splunk and external systems or data sources • Create, monitor, and maintain alerts for failed data inputs • Create and maintain custom Technical Add-Ons for non-standard ingest paths leveraging API connections • Ensure proper authentication and authorization mechanisms for data transfer and system communication • Oversee Splunk infrastructure configuration and maintenance for optimal performance and security • Collaborate with cross-functional teams to troubleshoot and resolve Splunk issues • Conduct root cause analysis and implement preventive measures • Use Linux skills to manage and maintain the underlying operating system or cloud-based containers of Splunk servers and other security applications • Monitor tool health and performance to identify issues, bugs, or potential improvements • Develop, review, and update operational documentation, including SOPs, job aids, application checklists, and playbooks • Support system access controls, including account management, access enforcement, information flow enforcement, least privilege, account requests, and account recertifications • Collaborate with SOC teams on process optimization, tool tuning, tool integration, information sharing, playbook development, and incident response • Perform implementation, administration, operations and maintenance, optimization, and integration of cybersecurity tools, technologies, and services • Conduct regular Splunk Enterprise upgrades for deployment servers, heavy forwarders, and syslog servers

🎯 Requirements

• 4 years of Information Technology Experience • Bachelor of Science in Computer Science, Information Systems, Mathematics, Engineering, related degree or an additional two (2) years of experience • 3+ years of Splunk administration or engineering experience • Proficiency in configuring and managing Splunk inputs, setting up data ingestion pipelines, and establishing system connections • Knowledge of Splunk's Search Processing Language (SPL), data parsing techniques, and regular expressions • Skilled in optimizing data pipelines for performance and efficiency, handling large data volumes, and implementing best practices for data integrity and consistency • Splunk Core Certified Consultant or Splunk Enterprise Certified Architect certification preferred • Splunk Enterprise or Splunk Cloud Certified Admin acceptable • Experience as an engineering team lead • Experience working with Splunk, syslog, syslog-ng or systems designed to collect and centralize logs • Experience leveraging Cribl to optimize Splunk ingest • Experience assisting teams with Fraud Analytics • Strong analytical and problem-solving skills, with the ability to effectively prioritize and execute tasks

🏖️ Benefits

• Valiant pays 99% of the Medical, Dental, and Vision Coverage for Full-time Employees • Valiant contributes 25% towards Health Coverage for Family and Dependents • 100% Paid Short Term Disability and Life Insurance Policy for Full-time Employees • 100% Paid Certifications • 401K Matching up to 4% • Paid Time Off • Paid Federal Holidays • Wellness & Fitness Program • Valiant University – Online Education and Training Portal • FSA programs for: Medical Costs, Dependent Care, Transit, and Parking • Referral Bonuses