Splunk Subject Matter Expert - Remote

Overview

As a Splunk Subject Matter Expert at GDIT, you will play a crucial role in enhancing our cybersecurity posture by leveraging Splunk for threat detection, analysis, and response while supporting complex government, defense, and intelligence projects.

In Short

• Lead the implementation and optimization of Splunk for cybersecurity monitoring.
• Collaborate with cross-functional teams for log collection and incident response.
• Develop advanced Splunk queries, dashboards, and alerts.
• Utilize cybersecurity technologies to safeguard digital assets.
• Design and evaluate information system security throughout the system life cycle.
• Provide guidance to less-experienced cybersecurity personnel.
• Maintain knowledge of current information security practices.
• Participate in an on-call rotation for after-hours escalations.
• Support the mission of enhancing national security.
• Engage in continuous learning and professional development.

Requirements

• Bachelor's degree in a related field.
• 8+ years of related experience in cybersecurity.
• Expertise in Splunk and SIEM tools.
• Ability to manage parallel tasks and document issues.
• Knowledge of network vulnerability scanning platforms.
• Understanding of Microsoft Windows networks and security practices.
• CompTIA Security+ certification (must obtain within 6 weeks).
• Active Secret Clearance preferred.
• Knowledge of cloud computing (AWS, Azure) is a plus.
• Strong analytical and problem-solving skills.

Benefits

• Comprehensive medical, dental, and vision plans.
• 401K with company match.
• Flexible work weeks and paid time off.
• Short and long-term disability benefits.
• Life and accident insurance options.
• Continuous review of total rewards package for competitiveness.
• Military-friendly workplace culture.