Splunk Engineer - Consultant Certified / ES Accreditation Required (R-00064)
True Zero TechnologiesVirginia, United States
Posted April 22, 2025
Full Time
About the Company
True Zero Technologies is a Veteran-Owned Small Business specializing in comprehensive cybersecurity and consulting services. We offer a range of solutions including 24/7 SOC support, incident response, security engineering, threat intelligence, and managed services, with a focus on building resilient Zero Trust architectures and ensuring compliance across various sectors. Our team of seasoned professionals brings a proven track record of success in large-scale national cybersecurity initiatives.
Job Description
True Zero Technologies, a veteran-owned small business, is seeking a Splunk Engineer - Consultant Certified to join their team. The role involves maintaining client Splunk instances with a focus on data onboarding, content development, reporting, and visualizations. This position offers access to a knowledge base, collaboration opportunities, and training resources within a supportive team environment. Candidates with federal customer support experience are preferred.
Requirements
- US Background Check Required
- Splunk Consultant Certification
- Heavy Splunk ES Experience
- Experience ingesting logs into Splunk via Cribl
- Experience with RBA
- Develop and Implement Actionable Alerts and Workflow for Splunk as a SIEM
- Develop and Implement Apps & Knowledge Objects (KO) like Dashboard, Reports, Data Models
- Work with the Splunk Architect/Admin to promote private KO to Global KO
- Assist, and/or train CISO Splunk Engineering team on Data Lifecycle
- Support Assist, train, and/or host workshops CISO teams and analysts on Searching and Content Development
- Develop and implement automation to improve efficiency of CISO workflows using Splunk
- Develop risk rules and risk incident rules to correlate and alert to significant cyber events
- Develop custom dashboards specific to RBA
- Configure incident response and remediation workflows for ES around notable events
- Develop custom machine learning (ML) models to support anomaly-detection based augmentation of alerting
- Work with numerous stakeholders to implement & maintain event logging from various operating systems, applications, identity providers, network infrastructure, and cloud service providers
Benefits
- Competitive salary
- Best in class medical coverage
- 100% of medical premiums covered by True Zero
- Company wide new business incentive programs
- Contribution Incentives
- 3 weeks of PTO starting + 11 Paid Holidays Annually
- 401k Program with 100% company match on the first 4%
- Monthly reimbursement of Cell Phone and Home Internet costs
- Paternity/Maternity Leave
- Investment in training and certifications
