Splunk Specialist

I am looking for a candidate with the following qualifications: 1. An active Secret or Top-Secret clearance is essential. 2. A Bachelor's Degree in Information Technology, Information Systems Management, or Cybersecurity is preferred. 3. IAT Level II certification is required. 4. Certification in Splunk Administration or higher is a must. Additionally, I expect candidates to have: 1. Between three to five years of experience in multi-enclave enterprise On-Premises Splunk/Splunk Cloud Engineering. 2. Proficiency in managing and implementing various Splunk applications, such as Enterprise Security and ITSI. 3. Experience supporting Incident Responders and other SOC members in developing queries, alerts, dashboards, and other tools via Splunk. 4. A solid understanding of maintaining the health of the Splunk environment. 5. Practical knowledge of performing Linux Command Line actions to support Splunk Servers. 6. A desire to collaborate with different technology groups to enhance log ingestion to On-Premises Splunk and/or Splunk Cloud. 7. Experience in supporting Security Operations Center objectives. 8. A proactive approach to working with appropriate teams to implement and test new detection rules and procedures. 9. A background in advanced analysis and correlation of cyber events, logs, and artifacts. 10. Familiarity with RMF accreditation processes. 11. Participation in red/blue team testing to confirm and fine-tune detection and alerting mechanisms via Splunk. 12. Experience in creating and maintaining Standard Operating Procedures (SOPs). 13. Knowledge of DISA Security Technical Information Guides, NIST SP 800-61, CJCSM 6510.01 B, United States Cyber Command guidelines, and other pertinent DoD Cybersecurity and Computer Network Defense policies. 14. Experience in developing and reporting metrics, ideally in a near-real-time dashboard or common operating picture.