5 days ago
Remote, United States or El Paso, TX, USASenior
Responsibilities
- Administer, install, configure, maintain, and tune Splunk and other SIEM/log management tools in cloud and on-premises environments.
- Develop, audit, and optimize correlation rules and detections in collaboration with the Enterprise Security Operations Center.
- Build and maintain dashboards, reports, alerts, visualizations, SPL queries, and Splunk knowledge objects.
- Onboard and manage data sources, deployment servers, forwarders, inputs, reporting, and alerting across Azure and AWS.
- Develop scripts and integrations using Python, Bash, and PowerShell, and orchestrate workflows with ServiceNow and other security or infrastructure platforms.
- Improve platform performance, maintain configuration standards and access controls, document procedures, and develop monitoring-effectiveness metrics.
- Resolve incidents and operational issues, follow change-management processes, and support Linux and Windows platforms.
- Train and mentor ESOC members and work with analysts, clients, and business stakeholders to meet tooling and application requirements.
Requirements
- Bachelor’s degree plus 5 or more years of related cybersecurity operations or software analyst/programming experience, or a master’s degree plus 3 or more years of related experience.
- An additional 4 years of experience may be considered in lieu of a degree.
- Demonstrated experience administering and engineering Splunk.
- Must obtain Splunk Core Certified Admin within 3 months, Azure AZ-900: Microsoft Azure Fundamentals within 6 months, and AWS Cloud Practitioner within 9 months of employment.
- Must be a U.S. citizen and available for flexible hours and on-call rotations.
- Knowledge of security technologies, information security, networking, technical support, customer interaction, and documentation is expected.
Benefits
- The position may be remote anywhere in the United States.
- Flexible work hours and participation in on-call rotations are required.
- Required certifications are completed within the stated first 3, 6, and 9 months of employment.
About SAIC
SAIC (Science Applications International Corporation) is a government technology integrator delivering systems engineering, enterprise IT, secure cloud, cybersecurity, C5ISR, and data analytics for U.S. defense, space, intelligence, and civilian agencies. It builds and sustains mission IT and digital engineering solutions under multi-year federal contracts and task orders. Founded in 1969, SAIC is headquartered in Reston, Virginia, and is a public company traded on the NYSE under the ticker SAIC.