Journeyman Splunk Platform Engineer

Secure our Nation, Ignite your Future

ManTech holds the distinct honor of being named a “Top 100 Global Technology Company” by Thomson Reuters. ManTech leadership works to continue this high level of industry recognition by affording our employees opportunities to break through barriers. We reinvest in our employees through rich educational opportunities such as 100% paid tuition for qualifying Bachelor’s and Master’s degrees, extensive training and certification programs enabling our employees to obtain industry recognized skills sets and certifications, as well as Communities of Practice where employees can engage and exchange knowledge  as well as a diverse and in-depth range of instruction and resources needed for personal and professional development through our very own ManTech University. In addition to those amazing benefits, ManTech also has a fully dedicated Career Mobility team to provide you with guidance and assistance to continue to grow your career with ManTech.

Become an integral part of a diverse team while working at an Industry Leading Organization, where our employees come first.  At ManTech International Corporation, you’ll help protect our national security while working on innovative projects that offer opportunities for advancement. 

Currently, we are seeking a motivated, career and team-oriented cybersecurity data engineer in support of the U.S. Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA) Continuous Diagnostic & Mitigation (CDM) Data Services Program. The CDM Data Services Program is a critical component of CISA’s national effort to ensure the defense and resilience of cyberspace.

The CDM Data Services Program mission is to provide a standardized platform to collect, transform, and integrate cybersecurity data from relevant authoritative data sources into a coherent data, delivering actionable information into Agency and Federal Dashboards to identify risk areas in support of mitigation as well as to facilitate coordinated agency and national response to cyber-threats.  

This is a remote position where the candidate can work from any location within the United States provided, they are able to work on an eastern time zone schedule.

We are seeking a highly skilled Journeyman Splunk Platform Engineer to support the Continuous Diagnostics and Mitigation (CDM) program at the Cybersecurity and Infrastructure Security Agency (CISA). The Journeyman Splunk Platform Engineer will lead the design, implementation, configuration, and optimization of Splunk solutions to enhance the cybersecurity posture of government networks. This role requires a deep understanding of Splunk, cybersecurity principles, and the ability to collaborate effectively with cross-functional teams to ensure the success of the CDM program.

Responsibilities:

The Journeyman Splunk Platform Engineer will:

• Review the as-built architecture of Splunk solutions to support the CDM program's cybersecurity objectives at multiple Agencies.
• Implement engineering solutions to Splunk deployments to ensure efficient data migration to the new data repository.
• Collaborate with stakeholders to gather requirements and translate them into technical solutions leveraging Splunk's capabilities.
• Ensure data stored in Spunk indices can be read by external data movement tools such as Cribl
• Manage API keys for external tools to programmatically query Splunk data
• Perform data onboarding, normalization, and enrichment to ensure high-quality and actionable data for security monitoring and analysis.
• Stay up-to-date with the latest Splunk versions, features, and best practices to continuously enhance the effectiveness of the CDM program.
• Perform troubleshooting, root cause analysis, and resolution of complex technical issues related to Splunk deployments during migration.
• Conduct system performance monitoring and capacity planning to maintain the optimal operation of to be infrastructure.

Basic Qualifications:

• Associate degree in computer science, Information Technology, or a related field. Relevant industry certifications are a plus.
• 3 years’ experience as a Splunk Engineer or in a similar role, preferably in a cybersecurity or CDM deployments.
• Intermediate level knowledge of Splunk Enterprise and Splunk Enterprise Security, including architecture, installation, configuration, and administration.
• Basic understanding of cybersecurity principles, threat intelligence, and incident response.
• Basic knowledge of REST APIs including their methods and authentication techniques
• Proficient in developing custom Splunk dashboards, and reports using Splunk's Search Processing Language (SPL).
• Hands-on experience integrating Splunk with various data sources, security tools, and SIEM platforms.
• Ability to create complex search queries, correlation rules, and alerts to support security monitoring and analysis.
• Excellent problem-solving and troubleshooting skills, with the ability to analyze and resolve complex technical issues.
• Strong communication and interpersonal skills, with the ability to effectively collaborate with cross-functional teams and stakeholders.
• Self-motivated and able to work independently as well as part of a team in a fast-paced environment.

Security/Clearance Requirements:

• Must be a US citizen and pass a background investigation.
• Able to obtain and maintain a DHS Suitability/Entry on Duty (EOD)

Physical Requirements:

• Must be able to be in a stationary position more than 50% of the time 
• Must be able to communicate, converse, and exchange information with peers and senior personnel 
• Constantly operates a computer and other office productivity machinery, such as a computer 
• The person in this position frequently communicates with co-workers, management, and customers, which may involve delivering presentations. Must be able to exchange accurate information in these situations 
• The person in this position needs to occasionally move about inside the office to access file cabinets, office machinery, etc.

For all positions requiring access to technology/software source code that is subject to export control laws, employment with the company is contingent on either verifying U.S.-person status or obtaining any necessary license. The applicant will be required to answer certain questions for export control purposes, and that information will be reviewed by compliance personnel to ensure compliance with federal law. ManTech may choose not to apply for a license for such individuals whose access to export-controlled technology or software source code may require authorization and may decline to proceed with an applicant on that basis alone.