Splunk SOAR Administrator

Location: Suitland, MD
Security Clearance: Active TS/SCI Required

Join a team committed to a mission!

At Leidos, we deliver innovative solutions through the efforts of our diverse and talented people who are dedicated to our customers’ success. We empower our teams, contribute to our communities, and operate sustainable. Everything we do is built on a commitment to do the right thing for our customers, our people, and our community. Our Mission, Vision, and Values guide the way we do business.

Are you ready for your next career challenge?

Leidos is hiring a Splunk SOAR Administrator to join our team in Suitland, MD. In this role, you will provide engineering, operations, and technical support for Security Information and Event Management (SIEM) platforms that support threat detection, compliance, and security incident management for the Office of Naval Intelligence's Hopper Global Communications Center (HGCC). You will help develop and automate cybersecurity operations while supporting mission critical defensive cyber capabilities.

Primary Responsibilities

• Design, deploy, and maintain EAC backend architecture.

• Administer the SOAR platform, including configuration, asset integrations, and custom fields.

• Design, develop, test, and maintain automated SOAR playbooks for alert triage, enrichment, and risk based response.

• Integrate SOAR with Splunk Enterprise Security, ticketing systems, and threat intelligence feeds.

• Manage clustering, replication, indexing performance, and license usage.

• Apply DISA STIGs, SRGs, and NAVINTEL Information Assurance baselines.

• Maintain version control, approval workflows, and playbook governance.

• Configure and maintain the secure transmission of Audit.XML records to Intelligence Community partners through ITS and troubleshoot transmission failures.

• Implement standard incident response workflows aligned with MITRE ATT&CK, NIST SP 800-61, and HGCC N62 Defensive Cyber Operations procedures.

• Travel may be required between the National Maritime Intelligence Center (NMIC) and other designated CONUS and OCONUS locations in support of program requirements.

Required Qualifications

• Bachelor's degree in Computer Science, Information Technology, Information Assurance, or a related discipline with 8+ years of relevant experience, or a Master's degree with 6+ years of relevant experience. 15+ years of experience, including at least 10 years supporting LAN/WAN technologies, may be considered in lieu of a degree.

• Active TS/SCI security clearance.

• Active IAT Level III certification (such as CISSP).

• 8+ years of engineering experience supporting Computer Network Defense (CND).

• 6+ years of experience with Splunk, including Splunk Add-ons, Apps, Technology Add-ons (TAs), and Universal Forwarder.

• Expert knowledge of Splunk, including Splunk Enterprise, Splunk Enterprise Security, and Splunk SOAR.

• Significant experience with the System/Software Development Life Cycle (SDLC).

• Strong analytical and problem solving skills.

• Effective verbal and written communication skills.

Preferred

• Expert knowledge of Splunk and its components, including Splunk Enterprise, Splunk Enterprise Security, and Splunk User Behavior Analytics (UBA).

DABAOPP1

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.

Original Posting:

Pay Range:

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.