Qualifications

• U.S. citizenship is mandatory as work occurs in a federally controlled setting.
• Experience managing a SIEM or large-scale data platform like Splunk, Elastic, or Microsoft Sentinel.
• Proficiency in automation and scripting with Python, PowerShell, or Bash.
• Familiarity with platform REST APIs for auditing and configuration tasks.
• Experience with Git and automated deployment of configurations.
• Strong query skills in a platform-specific language with measurable performance outcomes.
• Basic knowledge of Linux administration including services, filesystems, and networking.

Responsibilities

• Administer and manage production environments of SIEM/data platforms.
• Automate administrative tasks using scripts and configuration management tools.
• Conduct bulk auditing and configuration using platform REST APIs.
• Implement version control for configuration and content deployment.
• Document processes and workflows clearly for team reference.
• Oversee change management and workstreams with minimal oversight.
• Ensure performance optimization through effective query language usage.

Benefits

• Work in a security-driven, federally controlled environment.
• Opportunity to work with leading SIEM platforms, primarily Splunk.
• Leverage automation skills in a hands-on production setting.
• Collaborate with experienced professionals in the IT security domain.
• Access to resources for continuous learning and professional development.