Splunk Administrator Level 4

SPYROS Information & Technology Consulting, a wholly owned subsidiary of Synergy ECP. is a Service-Disabled Veteran Owned Small Business (SDVOSB), headquartered in the Baltimore–Washington corridor, established to provide unique and exceptional services to our clients in the government and national defense sectors. SPYROS specializes in providing highly qualified professionals experienced in Computer Network Operations, Signals Intelligence, Technical Training and Certifications, Network Administration and Security, and Program Management to fit the specific needs of our clients. We maintain a vast array of capabilities at the nexus of the digital domain and in the Intelligence Community, meeting the demand for highly specialized skills to solve the most difficult problems. As a small company, SPYROS is agile and focused. We provide our clients flexibility and the individual attention necessary to meet rapidly changing requirements and rising challenges. As the digital world and cyberspace domain continue to gain increasing importance in the Intelligence Community, SPYROS will continue to leverage the technical expertise of our highly skilled personnel and enable our clients to devise and implement innovative solutions to their emerging challenges.

Duties:

-Implements, tests, and operates advanced software security techniques in compliance with technical reference architecture.

-Performs on-going security testing and code review to improve software security.

-Troubleshoots and debugs issues that arise.

-Provides engineering designs for new software solutions to help mitigate security vulnerabilities.

-Contributes to all levels of the architecture and maintains technical documentation.

-Consults team members on secure coding practices. Develops a familiarity with new tools and best practices.

-Designing, implementing, and maintaining SIEM and SOAR solutions.

-Design and implement threat detection, automate incident response processes, integration of various security tools with SIEM and SOAR platforms via APIs

-Maintain SIEM applications to collect and aggregate IDS and IPS data from network sensors, raw data from collection agents, firewalls, proxy servers, DLP, antivirus, vulnerability scanner elements, and other security-relevant devices.

-Utilize expertise in Splunk "Search" language, Splunk Dashboards, Reports, Lookup Tables, and Summary Indexes. Build Splunk dashboards that take inputs from various data sources such as application logs / operating system logs / middleware logs / network feeds etc. and identify / highlight anomalous activities on the dashboards by their severity levels.

-Perform troubleshooting and provide assistance with the creation of Splunk search queries and dashboards.

-Systems Administration position on subcontract, willing to work with you on which one - Site System Admin-4 or Systems Administration - 4 (Lead System Administrator)

Location: Annapolis Junction, MD 

Qualifications:

-Must possess Active Top Secret clearance with SCI eligibility

-Requires 8 to 10 years experience with BS/BA or 6 to 8 years experience with MS/MA or 3 to 5 years experience with PhD.

-Requires experience with importing data in Splunk from various sources: endpoint security, network security (Firewalls, IPS/IDS, DNS, Proxy, etc.), data and application security, cloud security and technologies.

-Requires experience with performing systems administration, including performing installation, configuration, monitoring system performance and availability, upgrades, and troubleshooting of Splunk.

-Requires experience with designing, implementing, configuring, operating, or testing IT systems or security infrastructure.

-Requires experience building dashboards highlighting the key trends of the data.

-Requires proficiency within a Windows and Linux environment, editing and maintaining Splunk configuration files and apps.

-Experience in working in a Splunk clustered environment supporting SOC or NOC environment required.

-Experience with virtualization technologies required.

-Splunk Architect, Splunk Admin

-DoD 8570 Level 3 Certification

Compensation Spotlight: 

For this role, our typical salary range starts at $80,000 and stretches up to $160,000. But here's the deal – we're not about capping your potential. We're committed to snapping up the best and brightest, and we're ready to put our money where our mouth is. So, if you're one of the rare exceptions to the status quo with the education, experience, and that extra something special, we're not afraid to go above and beyond to secure your talent. Because for us, it's not just about a salary. It's about the complete rewards package, the culture, and the opportunity to make a real impact. 

SPYROS is an equal opportunity employer and considers qualified applicants for employment without regard to race, color, creed, religion, national origin, sex, sexual orientation, gender identity and expression, age, disability, veteran status, or any other protected class.