Splunk Engineer

CVP is an award-winning healthcare and next-gen technology consulting firm recognized for excellence and innovation in the solutions we have provided our clients across healthcare, national security, and the public sector.

CVP is seeking a Splunk Engineer to execute and support the implementation of a successful Cybersecurity program. 

• Act as a Splunk Subject Matter Expert on an established team 
• Implement approved Splunk architecture and design 
• Support and maintain high availability for SaaS Splunk deployments 
• Maintain Splunk architectural diagrams and documentation 
• Troubleshoot complex integration challenges and configuration issues 
• Seek opportunities for automation and integration of various tools and services 
• Support onboarding activities and maintenance on a wide variety of data sources that include various OS, appliances, and application logs 
• Create Splunk search, dashboard, reports and alerts. 
• Serve as a member of the cybersecurity team responsible for the planning, designing, and architecting of a multi-technology cyber solution  
• Investigate to determine root causes of security issues to perform troubleshooting and problem resolution to restore services  
• Develop, present, and implement sound recommendations for remediation  
• Provide guidance and support security activities while building relationships with key personnel  
• Document and inform management with information about security information and event management  
• Remote management and troubleshooting of workstations and servers  
• Provide agency with knowledge and guidance in following NIST, FISMA, Agency Information Security and Privacy, and Cloud Guidelines  

• Must be eligible to obtain a Public Trust government security clearance 
• 4+ years of experience with deploying, configuring, and performing functional testing and data validation in a Splunk environment 
• Experience implementing Splunk installations from the ground up, including various server roles (Search Head, Indexers, Heavy Forwarders and Universal Forwarders, etc.)
  Splunk Administrator certification 
• 4-year college degree in Computer Science or related field or 4 years’ IT experience in lieu of a college degree (or a mix there of)  
• At least 2 years of security experience, including at least 1 year directly engaged with security engineering activities  
• Knowledge of various SIEM tools and log management technologies such as Splunk, Syslog, LogRhythm, and ELK as well as the implementation of such technologies  
• Experience in working with both Linux and Windows operating systems  
• Experience demonstrating strong analytical, troubleshooting, and problem-solving skills for security information and event management  
• Excellent communication skills, both written and oral  
• Knowledge of NIST, FISMA, and Cloud Environments  

Desired Skills  

• Knowledge of Information Security and Privacy guidelines  
• Understanding of Various Cloud Environments  
• Cybersecurity related certifications such as Security+ preferred, but not required  
• Two years of federal security support experience preferred, but not required  
• Some formal Splunk training would be ideal, but on the job experience can also be substituted.  

About CVP

CVP is an award-winning healthcare and next-gen technology and consulting services firm solving critical problems for healthcare, national security, and public sector clients. We help organizations achieve lasting transformation.