Senior Information System Security Engineer

Support Splunk deployments in classified environments as a Senior Information System Security Engineer within MITRE’s Cybersecurity Risk Management Department.

Responsibilities

• Design, deploy, and maintain Splunk environments including clusters, indexers, and forwarders with a focus on high availability, scalability, and performance.
• Identify and integrate new data sources into Splunk, managing data inputs, indexes, and source types.
• Build custom dashboards, apps, reports, and alerts using SPL to visualize trends and deliver actionable insights.
• Monitor Splunk health, troubleshoot issues, and optimize search performance and data retention policies.
• Partner with end-users to gather requirements, assist with searches, and provide training on Splunk usage and best practices.
• Coordinate with IT, security, and other teams to support business needs.
• Secure the Splunk environment through security updates, vulnerability patching, STIG remediation, and Splunk-based security event monitoring and incident response support.
• Develop Splunk dashboards and alerts aligned to NIST 800-53 audit requirements to support compliance with federal security standards.
• Collaborate with System Administrators and Information System Security Officers/Managers to sustain Splunk operations.
• Work with logs from Windows, Linux, Palo Alto, and Cisco to ensure correct Splunk ingestion for operational monitoring, troubleshooting, and security use cases.
• Apply strong problem-solving to create mitigation strategies and operate Splunk in compliance with Security Technical Implementation Guides (STIG) requirements.
• Manage Splunk user roles and permissions, authentication mechanisms, configuration files, data inputs, and forwarders.
• Own analysis, integration, testing, operations, and maintenance for Splunk system security.
• Support external security inspections and maintain compliance for department Splunk environments.

Requirements

• Minimum 5 years of related experience with a Bachelor’s degree; or 3 years with a Master’s degree; or a PhD with relevant experience who can contribute immediately; or an equivalent combination of education and experience.
• Deep understanding of Splunk architecture, administration, and management on Linux and Windows infrastructure.
• Proficiency in scripting such as Python, Bash, and PowerShell to automate Splunk-related tasks.
• Strong analytical and problem-solving skills for troubleshooting complex issues in distributed systems.
• Hands-on experience with medium to large enterprise Splunk environments.
• Knowledge of classified infrastructure and the A&A process.
• Ability to communicate complex technical topics clearly to both technical and non-technical audiences.
• Self-starter with initiative to coordinate across multiple teams and stakeholders to complete projects.
• Must meet DoD 8570.01M IAM Level III requirements.
• Must have an active Top Secret/SCI U.S. Government issued Security Clearance, and must be able to obtain and maintain a Top Secret/SCI w/Poly U.S. Government issued Security Clearance.
• Must be a U.S. Citizen to be considered for security clearance eligibility.
• On-site requirement: 5 days a week on-site.

Technologies

• Splunk, SPL, Python, Bash, PowerShell
• Linux, Windows, Palo Alto, Cisco

Preferred Qualifications

• Active TS/SCI with CI Poly Security Clearance.
• Experience with SPL, data onboarding, custom apps, and building visualizations.
• Knowledge of emerging IT and cybersecurity technologies.
• Experience with Windows, RHEL, virtualization, and networking in enterprise environments.
• Experience advising senior leadership on risk levels, security posture, and policy changes.
• Previous roles operating as a SCI/SAP ISSO, ISSE, System Administrator, or ISSM.
• Ability to mentor junior staff and support a collaborative team environment.
• Familiarity with insider threat programs and mitigation strategies for insider risks.

Location: Bedford, MA (onsite)

Salary range: USD 129,200 - 193,800 per year (midpoint shown as $161,500)

Security clearance requirements: Candidate must have Top Secret/SCI.

Additional clearance requirement: Candidate must have or obtain Top Secret/SCI/Polygraph within one year from the date of hire.