General Dynamics Information Technology · 18 hours ago
Sr. Splunk Engineer/M-21-31 Compliant Event Logging Implementation (Remote)
United States
Full-time
Remote
Senior Level, Lead/Staff
$136K/yr - $184K/yr
15+ years exp
Maximize your interview chancesInformation Technology
No H1B
U.S. Citizen OnlySecurity Clearance Required
Insider Connection @General Dynamics Information Technology
Get 3x more responses when you reach out via email instead of LinkedIn.
Responsibilities
Design and implement comprehensive logging solutions, in alignment with M-21-31 and EO 14028 requirements leveraging Splunk Enterprise and other enterprise event driven tool suites.
Work closely with government stakeholders to understand security requirements, interpret directives, and support the technical application to the operating environment
Implement log standards and data integrity processes to ensure events are logged in alignment with federal requirements
Verify logging compliance, ensuring application and system logs are generated and captured with the centralized logging solution
Candidate will be 'hands-on' with the solution deployment and implementation of the following Splunk elements:
Log data ingestion from applications, databases, infrastructure endpoints, and monitoring tools
Development of Saved and Scheduled Searches
Report and Dashboard/Data Visualization development
Establish Logging Event Alerting and assist with event correlation duties
Establish interfaces and data sharing with other Splunk instances to integrate data feeds
Provide strategic and technical recommendations to sponsor, occasionally writing short whitepapers and/or building executive briefs
Collaborate with stakeholders to identify, implement, and prioritize new potential risk indicators into Splunk UBA.
Develop and publish the following solution documentation:
Document modifications to the current Splunk configuration baseline to include architecture diagrams
Publish Splunk Job-Aids/User Documentation and Splunk Training Materials
Develop and deliver training to the stakeholder community, providing operational guidance to include the following elements:
Deployed searches
Reports and dashboards
Alerts
Event Correlation
Qualification
Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.
Required
A master’s degree in computer science, Cybersecurity, Software Engineering, Computer Science or a closely related technical field, 12 years of IT experience and at least 10 years of experience in developing and implementing Splunk Enterprise logging solutions.
In lieu of a master’s degree, candidates with a bachelor’s degree in computer science, Cybersecurity, Software Engineering, Computer Science or a closely related technical field, 14 years of IT experience and at least 10 years of experience in developing and implementing Splunk Enterprise logging solutions.
In lieu of bachelor’s degree, candidates with a HS diploma require at least 16-18 years of extensive, directly relevant experience in Cybersecurity and at least 10 years of experience in developing and implementing Splunk Enterprise logging solutions.
Splunk Certifications: Splunk Enterprise Security Certified Admin, Splunk Enterprise Certified Architect
Advanced SPL search construction and optimization with a focus on security and detection engineering
Thorough understanding of Splunk User Behavior Analytics to support the development of a UBA strategy and technical implementation.
In-depth understanding of White House Memorandum on Federal System Logging Requirements (M-21 -31), data integrity principles, log analysis, logging best practices, and rigorous auditing standards as they relate to government record-keeping requirements.
Strong understanding of web application, database, networking, and compute infrastructure log data formats, event correlation, and data retention policies.
In-depth knowledge of cybersecurity frameworks (NIST, ISO, etc.), risk assessment methodologies, and federal compliance standards.
Ability to translate technical security requirements into actionable plans for development teams and clearly articulate risks to non-technical stakeholders.
Proven track record in designing and implementing robust Splunk-based log aggregation solutions in alignment with federal government-mandated compliance framework requirements.
Exceptional written and verbal communication to support the development and delivery of solution training.
US Citizenship Required
Benefits
401K with company match
Comprehensive health and wellness packages
Internal mobility team dedicated to helping you own your career
Professional growth opportunities including paid education and certifications
Cutting-edge technology you can learn from
Rest and recharge with paid vacation and holidays
Variety of medical plan options, some with Health Savings Accounts
Dental plan options
A vision plan
401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match
Full flex work weeks where possible
Variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave
15 days of paid leave per calendar year to be used for vacations, personal business, and illness
10 paid holidays per year
Paid Family Leave program provides a total of up to 160 hours of paid leave in a rolling 12 month period for eligible employees
Short and long-term disability benefits
Life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance
Company
General Dynamics Information Technology
General Dynamics Information Technology has worked across the full spectrum of government and business for decades. It is a sub-organization of General Dynamics.
10,001+ employees
Funding
Current Stage
Late StageLeadership Team
Ben Buckley
Vice President, Business Area
Katharine Murphy
VP Cybersecurity, Preparedness and Enforcement
Recent News
Company data provided by crunchbase
