Splunk ITSI Engineer
总结：纳库普拿公司正在寻找一个 Splunk ITSI 工程师。负责海军供应系统指挥部 (NAVSUP) 商业系统中心 (BSC) 的 Splunk IT 服务情报 (ITSI) 架构，部署，配置和运营。该工程师将与现有的 Splunk 团队合作，将安全和 IT 数据带入统一的监控视图，提高服务健康的可见性，减少警报，并帮助团队在破坏操作之前识别问题。这一角色将建立服务健康模型，警报聚合政策和显示板，反映漏洞管理优先事项和组织的风险态度。下面反映了管理层对该职位的基本功能定义。由于合理的适应或其他原因，管理层可以随时将额外的任务和责任分配给这个工作。· 与现有 Splunk 工程团队协调领导 Splunk ITSI 设计，安装，硬化，配置和运营。·从不同数据来源中摄入和正常化安全，应用和基础设施远程测量；评估日志质量，实地一致性和收集方法。·确定 ITSI 实体，服务，关键性能指标 (KPIs),门和依赖以提供主动的服务健康监测。· 制定和调整可见事件聚合政策 (NEAP) 来相关事件，减少重复警报，并支持事故调查。· 构建实时服务健康，趋势和运营风险的玻璃表，深度潜水和执行仪表板。· 在与政府网络安全和运营利益相关者协商中协调服务健康模型和警告与漏洞管理优先事项。· 配置和解决有关 Splunk 搜索，警报，报告，视觉化，添加以及数据安装在现有平台内的问题。· 根据适用的国防部和 DON 要求，DISASTIGs 以及风险管理框架支持安全配置和访问控制。·验证数据流，ITSI 计算，仪表板和事件组合；随着运营需求的发展来完善配置。· 文件架构，配置，标准操作程序，学到的经验和最佳实践；为 NAVSUPBSC 人员提供培训和知识转移。· 每周更新完成的工作情况，剩余任务，依赖性等信息。
查看英文原文
Overview
Nakupuna Companies is looking for a Splunk ITSI Engineer. Lead the architecture, deployment, configuration, and operationalization of Splunk IT Service Intelligence (ITSI) for Naval Supply Systems Command (NAVSUP) Business Systems Center (BSC). The engineer will work with the existing Splunk team to bring security and IT data into a unified monitoring view, improve visibility into service health, reduce alert noise, and help teams identify issues before they disrupt operations. This role will build service health models, alert aggregation policies, and dashboards that reflect vulnerability management priorities and the organization’s risk posture.
Responsibilities
The following reflects management’s definition of essential functions for this position. Management may assign additional duties and responsibilities to this job at any time due to reasonable accommodation or other reasons.
- Lead the design, installation, hardening, configuration, and operationalization of Splunk ITSI in coordination with the existing Splunk engineering team.
- Ingest and normalize security, application, and infrastructure telemetry from disparate data sources; assess log quality, field consistency, and collection methods.
- Define ITSI entities, services, key performance indicators (KPIs), thresholds, and dependencies to provide proactive service health monitoring.
- Develop and tune Notable Event Aggregation Policies (NEAP) to correlate related events, reduce duplicate alerts, and support incident investigation.
- Build Glass Tables, Deep Dives, and executive dashboards that present real-time service health, trends, and operational risk.
- Align service health models and alerting with vulnerability management priorities in consultation with Government cybersecurity and operations stakeholders.
- Configure and troubleshoot related Splunk searches, alerts, reports, visualizations, add-ons, and data onboarding within the existing platform.
- Support secure configuration and access controls in accordance with applicable DoD and DON requirements, DISA STIGs, and the Risk Management Framework.
- Validate data flows, ITSI calculations, dashboards, and event grouping; refine configurations as operational needs evolve.
- Document architecture, configurations, standard operating procedures, lessons learned, and best practices; provide training and knowledge transfer to NAVSUP BSC personnel.
- Provide weekly status updates on work completed, remaining tasks, dependencies, and issues.
Qualifications
Skills/Qualifications:
- Experience designing, installing, administering, and troubleshooting Splunk ITSI in a Splunk Enterprise environment.
- Ability to model IT services, entities, KPIs, health scores, thresholds, and dependencies that reflect operational priorities.
- Experience with ITSI Glass Tables, Deep Dives, Event Analytics, Notable Event Aggregation Policies, and Episode Review.
- Strong Splunk Search Processing Language (SPL) skills and experience developing searches, alerts, reports, dashboards, and data models.
- Experience onboarding, normalizing, and correlating logs and telemetry from security, application, and infrastructure systems.
- Knowledge of Splunk forwarders, search and deployment servers, clustered indexers, add-ons, and data collection methods such as Syslog, JDBC, and APIs.
- Experience with Linux and Windows environments and with Splunk configuration files, field extractions, lookups, and access controls.
- Ability to work with Government cybersecurity and operations teams on vulnerability priorities, secure configuration, continuous monitoring, auditing, and reporting.
- Experience developing technical documentation, training users, communicating progress, and resolving dependencies across teams.
Education and Experience: A bachelor’s degree in a technical field, such as engineering or computer science, is required. Experience in Government or DoD environments is desired.
Clearance: Must be able to obtain a Top Secret clearance and be a U.S. Citizen.
Certification:
This position requires:
· CompTIA Security+ CE certification or an equivalent certification approved for the position.
Additionally, candidates must have ONE of the following Splunk certifications; the ITSI certification is preferred:
- Splunk IT Service Intelligence Certified Admin (Legacy)
- Splunk Enterprise Certified Admin
- Splunk Enterprise Certified Architect
- Splunk Cloud Certified Admin
- Splunk Enterprise Security Certified Admin
- Splunk Certified Developer
The Nakupuna Companies use a market-based compensation strategy to ensure that our employees are compensated within applicable market ranges commensurate with multiple factors, including but not limited to the individual’s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability, organizational requirements, and position location. The projected compensation range for this position is $150,000.00 to $165,000.00 (annualized USD). The salary range displayed represents the typical salary range for this position and is just one component of Nakupuna Companies total compensation package for employees.
Originally posted on Himalayas