Leidos logo
LeidosPosted 3 weeks ago

Splunk SOAR Engineer

$107,900–$195,050 year

On-siteSuitland, Maryland, United States

Full TimeMasters DegreeEnterprise

Job Summary

Design, deploy, and maintain EAC backend architecture while administering the SOAR platform, including configuration, asset integrations, and custom fields. Develop, test, and maintain automated SOAR playbooks for alert triage, enrichment, and risk-based response, integrating the system with Splunk Enterprise Security, ticketing systems, and threat intelligence feeds. Manage clustering, replication, indexing performance, and license usage, applying DISA STIGs, SRGs, and NAVINTEL baselines. Configure secure transmission of Audit.XML records to Intelligence Community partners and implement incident response workflows aligned with MITRE ATT&CK and NIST standards. Requires an active TS/SCI clearance, IAT Level III certification, and 8+ years of engineering experience supporting Computer Network Defense. Travel may be required between NMIC and other designated CONUS and OCONUS locations.

Required Qualifications

  • Active TS/SCI security clearance
  • Active IAT Level III certification (such as CISSP)
  • 8+ years of engineering experience supporting Computer Network Defense (CND)
  • 6+ years of experience with Splunk, including Splunk Add-ons, Apps, Technology Add-ons (TAs), and Universal Forwarder
  • Expert knowledge of Splunk, including Splunk Enterprise, Splunk Enterprise Security, and Splunk SOAR
  • Significant experience with the System/Software Development Life Cycle (SDLC)
  • Strong analytical and problem solving skills
  • Effective verbal and written communication skills
  • Bachelor's degree in Computer Science, Information Technology, Information Assurance, or a related discipline with 8+ years of relevant experience, or a Master's degree with 6+ years of relevant experience
  • 15+ years of experience, including at least 10 years supporting LAN/WAN technologies, may be considered in lieu of a degree
  • Travel may be required between the National Maritime Intelligence Center (NMIC) and other designated CONUS and OCONUS locations in support of program requirements

Desired Qualifications

  • NITESONI DABAOPP1

Hiring someone like this?

Get your role in front of qualified candidates on Sorce.

Get started

Apply to this job in one click with Sorce

Apply on Sorce