Accenturefederalservices

SIEM Subject Matter Expert (Splunk)

Washington, DC. Posted 11 days ago

The role

The Splunk Enterprise Security Subject Matter Expert will manage and optimize a large-scale Splunk deployment. This role involves managing architecture, platform health, and enhancing SOC throughput.

What you will do

  • Own Splunk Enterprise Security architecture, sizing, and platform health management.
  • Develop and tune correlation rules and use cases mapped to the MITRE ATT&CK framework.
  • Onboard new log sources and normalize data across a large, diverse endpoint environment.
  • Build and maintain SIEM-to-SOAR integrations.
  • Produce Splunk platform performance reporting and capacity-planning recommendations.
  • Support platform upgrades, patching, and lifecycle management.
  • Train and mentor SOC analysts on Splunk use and best practices.
  • Troubleshoot platform performance and data-quality issues.

Required qualifications

  • 5 years of SIEM architecture/engineering experience, including experience with large-scale deployments ingesting significant daily data volumes.
  • Bachelor's degree in Computer Science, Information Technology, or related field (equivalent experience considered in lieu of a degree).
  • Deep knowledge of Splunk architecture, Search Processing Language (SPL), and data onboarding.
  • Experience integrating SIEM with SOAR platforms for automated response.
  • Splunk Certified Architect (Splunk Enterprise Security Certified Admin also considered).
  • Active Secret or higher security clearance.

Benefits

  • hands-on experience
  • certifications
  • industry training

Before you apply

  • Applicants for employment in the US must have work authorization that does not now or in the future require sponsorship of a visa for employment authorization in the United States.
  • Candidates who are currently employed by a client of Accenture Federal Services or an affiliated Accenture business may not be eligible for consideration.

About the company

Accenture Federal Services is a technology company within global Accenture that helps the US federal government. Its 13,000+ people pursue technology and ingenuity for clients across defense, national security, public safety, civilian, and military health organizations.

SIEM Subject Matter Expert (Splunk) at Accenturefederalservices | JobZoey