Conviso Inc. · 18 hours ago
Splunk Engineer
United States
Full-time
Remote
Senior Level
6+ years expConviso Inc is hiring a Sr Splunk Engineer to join their cybersecurity / IT operations team. This role involves managing the Splunk platform, optimizing UBA and SOAR, and leading a team while ensuring compliance with security policies.
Business IntelligenceCloud ComputingData ManagementInformation TechnologySoftwareStaffing Agency
No H1B
Security Clearance RequiredU.S. Citizen OnlyHiring Manager
Deepak sharma
Responsibilities
Splunk Platform Management: Install, configure, and maintain Splunk Enterprise, UBA, and SOAR in both on-premises and cloud/hybrid architectures; perform system upgrades, patching, and troubleshooting. Strong preference for any Oracle cloud experience
UBA and SOAR Optimization: Customize and fine-tune UBA models for behavioral analytics; configure playbooks, integrations, and automated actions within SOAR to accelerate threat response. Coordinate directly with on-prem/cloud infrastructure teams to maintain and deploy these modules
Team Leadership & Mentoring: Supervise, mentor, and provide technical guidance to junior Splunk team members and peers; delegate tasks, review work quality, facilitate skills development, and foster a collaborative team environment in alignment with mission objectives
Security and Compliance: Implement and maintain Splunk best practices in accordance with defense agency security policies, compliance requirements, and data retention standards. Experience with STIGs mandatory
Incident Handling: Respond to incidents with appropriate logs and reports; proactively troubleshoot any log/analytic abnormalities preventatively
Collaboration & Agile Delivery: Work within Agile project teams, attending ceremonies (stand-ups, sprints, retrospectives) and using Jira for ticketing, backlog tracking, and documentation
Knowledge Sharing: Develop, update, and share technical documentation, standard operating procedures (SOPs), runbooks, and knowledge articles in alignment with agency practices. Work with many small, medium, and large teams to achieve agency and program objectives
Log Management and Analysis: Aggregate and parse logs from diverse data sources; develop and maintain dashboards, reports, alerts, and custom searches to surface actionable intelligence
Qualification
Required
At least 6 years of Splunk experience
Active Secret Clearance Required
DoD 8570 IAT II (i.e. Security+)
Splunk Certified Administrator or higher
Strong preference for any Oracle cloud experience
Experience with STIGs mandatory
Mastery in deploying and managing Splunk Enterprise, UBA, SOAR, and other Splunk modules
Experience using scripting (e.g., Python, Bash) for automation and data manipulation
Mastery in designing and tuning Splunk searches, dashboards, alerts, and CIM compliance
Experience with log sources common to defense/enterprise networks (Windows, Linux, network appliances, security devices)
Experience using Jira for workflow management and Agile methodologies for project delivery
Skilled communicator, able to collaborate with IT, cybersecurity, and mission teams in written and verbal communications with a positive attitude and customer-first approach
Proactive learner—stays current on Splunk and security operations best practices
Company
Conviso Inc.
At Conviso, we empower both government and commercial clients by delivering tailored professional services that drive success and help them overcome unique business challenges.
51-200 employees
Funding
Current Stage
Growth StageLeadership Team
Roy Quill
Chief Growth Officer (CGO)
Company data provided by crunchbase