Implement, install, and troubleshoot Splunk Enterprise (SE) and Splunk Enterprise Security (ES) systems
Maintain and administer SE and ES configurations, indexes, apps, and knowledge objects
Monitor system health, capacity, and performance to proactively address issues
Configure new data inputs to expand data collection capabilities
Create security dashboards, reports, alerts, and notifications
Collaborate with system administrators to enhance security monitoring capabilities
Perform updates and patches on the Splunk platform
Audit and review security practices to prevent security incidents
Maintain documentation of system configurations and changes

High School Diploma
At least 4+ years of system, network administration, or developer experience and 2+ years of Splunk administration
A Bachelor's degree in Computer Science can be considered in lieu of the 4 years of system/network admin or developer experience
IAW DoD 8140.03-M, must meet the Intermediate Proficiency Level qualifications
IAM-II Certification (one or more of the following): CISM, CISSP (OR ASSOCIATE), GSLC, CCISO, CAP, CASP+ CE, HCISSP
Must have Splunk Enterprise Certified Admin credential
Must have experience administering Linux servers
Must have experience with SIEM Content Development
Demonstrated experience of strong analytical and problem-solving skills

Security Information Event Manager – Administrator

Key skills