Splunk Engineer

Job Category: Engineering

Time Type: Full time

Minimum Clearance Required to Start: None

Employee Type: Regular

Percentage of Travel Required: Up to 10%

Type of Travel: Local

* * *

CACI is seeking a Spunk Engineer with the following in-depth knowledge and experience in the following areas:

Development, customizations, and maintenance of interactive dashboard(s), reports, and visualizations to Change Management, CIM compliance, Enterprise Security.

Creation, management, and tuning of alerts to notify stakeholders of critical events and security incidents.

Design and managing knowledge objects, such as field extractions using regex log parsing, event types, tags, and data models, to normalize data and improve search efficiency.

Collaboration with Splunk Team members to ingest and normalize new data sources, ensuring compliance with the Common Information Model (CIM) and enterprise logging standards.

Utilize Search Processing Language (SPL) to create complex queries, perform investigations, and provide deep data analysis for various use cases.

Integration of various applications with Splunk, utilizing Splunk REST API to query endpoints.

Build custom Technology Add-ons (TAs) to streamline data ingestion and improve overall Splunk system functionality

Required qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent work experience.
• Current Security+ certification
• Ability to pass T5 investigation
• 3+ years of hands-on experience in Splunk administration and development in an enterprise-level environment.
• Expertise with Splunk Enterprise and strong knowledge of the Search Processing Language (SPL).
• Proven experience creating complex dashboards, reports, and alerts.
• Solid understanding of Splunk architecture, data ingestion, and optimization best practices.
• Strong experience with regular expressions for field extractions.
• Excellent written and verbal communication skills with the ability to document technical processes and requirements.
• Must openly communicate and share knowledge and solutions with team members
• Strong attention to detail and accuracy.
• Ability to work independently and as part of a team.
• Problem-solving skills and a proactive approach to work.
• Attend daily stand-up (DSU) meetings, Sprint Planning, weekly camera sync and other scheduled team calls

Preferred qualifications

• Splunk certification(s), such as Splunk Core Certified Advanced Power User or Splunk Enterprise Certified Admin.
• Experience with Splunk Enterprise Security (ES) or IT Service Intelligence (ITSI).
• Proficiency in scripting languages like Python for Splunk automation.
• Familiarity with cloud environments and associated security best practices.
• Familiarity with Agile processes

-

________________________________________________________________________________________

What You Can Expect:

 

A culture of integrity.

At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation.

 

An environment of trust.

CACI values the unique contributions that every employee brings to our company and our customers - every day. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.

 

A focus on continuous growth.

Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy.

 

Your potential is limitless. So is ours.

Learn more about CACI here.

________________________________________________________________________________________

Pay Range: There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits. Learn more here.

Since this position can be worked in more than one location, the range shown is the national average for the position.

The proposed salary range for this position is:

$98,500-$206,800

CACI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any other protected characteristic.