SIEM Data Onboarding Engineer - Active TS/SCI with CI Poly

The Splunk Engineer is responsible for managing and enhancing our Splunk environment to ensure seamless data ingestion, analysis, and visualization. This role demands a deep understanding of Splunk architecture, data onboarding, and user management to support business needs and security operations.

• Design, deploy, and manage Splunk infrastructure


• Develop and maintain Splunk dashboards, queries, and alerts


• Integrate Splunk with various data sources to ensure comprehensive data ingestion


• Monitor and troubleshoot Splunk performance issues


• Collaborate with cross-functional teams to gather requirements and provide Splunk solutions


• Implement and enforce best practices for Splunk data management and retention


• Provide user training and support for Splunk-related activities

Requirements

• 2+ years of experience in managing and configuring Splunk, 2+ yea...