Splunk Enterprise and Enterprise Security Administrator Job # R-00191724

Company: Leidos

Location: Suitland, MD

Clearance Required: TS/SCI

Salary: Pay Range $107,900.00 - $195,050.00

Description

Job #: R-00191724
Location: Suitland, MD
Category: Cyber Infrastructure Support
Travel Required: Yes, 10% of the time
Remote Type: No Remote
Referral Bonus Amount: $2,000
Sector: Defense

Leidos is seeking a Splunk Enterprise and Enterprise Security Administrator in Suitland, MD to maintain the NAVINTEL SIEM environment, engineer detection logic, develop dashboards, and support SOC operations.

Primary Responsibilities

Administer Splunk Enterprise, Enterprise Security, CIM compliance, correlation searches, RBAs, dashboards, and data models.
Onboard new data sources and ensure quality, parsing, and normalization.
Support incident response, threat hunting, detection engineering, and content governance.
Produce operational reports, posture summaries, dashboards, and detection documentation.

Requirements

Required Qualifications

Bachelor’s degree in CS, IT, IA or a related area with 8+ years of experience or a Master’s degree with 6+ years of experience. Additional experience may be considered in lieu of a degree.
Active TS/SCI clearance in DISS and required program access.
Demonstrated experience supporting Computer Network Defense (CND) operations and technologies.
6+ years professional experience in Splunk, Splunk Add-ons and Apps, and Splunk TA and Universal Forwarder installation, integration, configuration, administration, maintenance, and performance of RMF functions.
Deep experience with Splunk Enterprise/ES, search processing language (SPL), CIM mapping, dashboards, and Linux administration.
Experience supporting SOC workflows and SIEM tuning.

Required Certifications:

DoD 8570 CSSP Infrastructure Support certification category (e.g., CEH, CySA+, CASP+, CISSP).