Position Description:
- Ensure the Splunk infrastructure functions properly with PKI-based authentication, corporate authorization services, firewalls, and SSL/TLS communications.
- Contribute to development and ongoing improvement of industry best practices and standards for maintaining data analytics enterprise technologies.
- Assist with installing, testing, and deploying hotfixes/patches for Splunk app/product releases to manage enterprise vulnerabilities.
- Assist with development of knowledge articles, documentation, and work instructions used by the Splunk, server, desktop and Information System Security teams, and Tier 2/3 Help Desk technicians.
Mandatory Skills:Experience managing user authentication within Splunk including RBAC/ABAC
Experience reviewing network, host, and firewall security logs
Strong organizational, communication, and collaboration skills
Desired Skills:Experience with Splunk Machine Learning Toolkit (MLTK)
Experience with scripting languages such as CSS, HTML, JavaScript, and Python
Knowledge of RMF, Trellix ePO, NESSUS, SCAP, and vulnerability scanning
ServiceNow Ticketing System
Shell scripting to automate tasks and manipulate data
Certification Required:IAT Level II cert required
CompTIA Security+ CE
Experience:HS or GED - 20 Years
Bachelors - 25 Years
Clearance Required:
TS/SCI FS poly
Position requires a TS/SCI.
