Splunk Cybersecurity SME (Remote)

Overview Tier One Technologies is seeking a Splunk Cybersecurity SME to support our direct US Government client. This is going to be a 100% remote Contract-to-Hire position. SELECTED CANDIDATES WITHOUT REQUIRED CLEARANCE WILL BE SUBJECT TO A FEDERAL GOVERNMENT BACKGROUND INVESTIGATION TO RECEIVE IT. Responsibilities Design, deploy, and maintain on-premises and cloud based Splunk environments to support enterprise-level monitoring, alerting, and reporting. Execute new projects as well as data and user onboarding. Manage knowledge objects (fields, extractions, tags, event types, lookups, workflow actions, aliases, macros, and so on) – through automations, scripting, management server functions; to include .conf and .cfg files in scope of the last four Splunk Enterprise versions. Mentor and guide junior researchers or team members. Support off-hours and weekend efforts for incident investigations and systems maintenance. Qualifications A degree from an accredited College/University in the applicable field of services is required. If the individual's degree is not in the applicable field, then 4 additional years of related experience is required 8+ years of overall experience in cybersecurity. 5+ years of specific Splunk experience. Proven Splunk deployment and configuration management experience in large-scale environments. Proficiency in writing complex Splunk queries, dashboards, and alerts using SPL (Search Processing Language). Experience with REST APIs for Splunk and external system integration. Ability to leverage the Splunk AI Assistant and other AI tools to increase accuracy and efficiency of task and other deliverables. Advanced knowledge of Unix/Linux and/or Windows systems administration and troubleshooting. Strong scripting skills in Bash, Python, JavaScript, SQL and PowerShell for automation and integration tasks. Experience with Splunk upgrades, patching, and performance tuning. Proficiency in integrating Splunk with cloud platforms (AWS, GCP, Azure). Understanding of security and compliance requirements and implementation of role-based access controls (RBAC) in Splunk. Strong knowledge of logging standards and best practices across application and infrastructure layers.Strong problem-solving skills and the ability to translate research insights into practical solutions that address real-world challenges. Strong communication and collaboration skills with the ability to articulate complex technical concepts to both technical and non-technical audiences. Must be a US Citizen or have permanent residence status (Green Card). Must be able to obtain a Position of Public Trust Clearance. Must be able to pass a drug screening, criminal history, and credit checks. Must have lived in the United States for the past 5 years. Cannot have more than 6 months travel outside the United States within the last five years. Military Service excluded. (Exception does not include military family members).