SOC Content Developer-Atlanta, GA

Splunk Content Developer

Required Education: Bachelor’s Degree in Information Technology or related field
Required Experience: 6 years Splunk Content Development experience

Work Location: Atlanta, GA
Clearance Required: Active Public Trust or DoD Security Clearance

Responsibilities

• Support the day-to-day operation of a highly available distributed multi-clustered multi-tenant Splunk deployment
• Create queries, dashboards, and visualizations to support customer requirements and monitoring of the Splunk deployment
• Create and manage Splunk knowledge objects to include apps, dashboards, alerts, extractions, tags, workflow actions, and aliases
• Develop content with regular expressions, performing data interpretation classification, and enrichment
• Develop reports for operational activities and to meet NOC and SOC customer requirements
• Facilitate excellent problem solving, critical thinking, and analytical skills with the ability to de-construct problems
• Provide resources and certified personnel necessary with extensive knowledge of Splunk

Qualifications

• Flexibility to meet any threat scenario 24/7/365 as mission dictates
• Must be a US Citizen with an active DoD Public Trust Clearance
• Holds one or more Splunk certifications (Power User, Administrator, ES Developer, etc)
• Experience or a desire to learn advanced SOC methodologies using Splunk ES
• Experience or a desire to learn NOC technologies
• Experience with Security Orchestration, Automation and Response (SOAR) tools and technologies (e.g. Splunk Phantom, Ansible, Python, etc.)