Jacobs Jobs

Job Information

Jacobs Splunk Developer in Hanover, Maryland

Splunk Developer


Jacobs is seeking Splunk Developers (All levels) to support our client. As part of the design and implementation effort, the Splunk developer will participate in various aspects of the implementation, including using Splunk to develop a proof of concept where legacy information systems are migrated to Splunk Enterprise. The Senior Splunk Developer will have to model data from several legacy and/or modern applications before ingesting the data into Splunk. The Splunk Developer will work closely with government personnel and other professionals in a team environment.

  • Design and develop an “end to end” electronic transaction visibility, including large scale processing, integration, and analysis of system logs and databases in Splunk.

  • Develop statistical behavior models, and provide support for the development of machine learning approaches.

  • Develop visualization dashboards and indicators that identify anomalous activities.

  • Interact directly with client project team members and operational staff.


Qualifications (minimum requirements, clearance, exp, tools, must haves, etc.):

  • Bachelors Degree or 4 additional years of experience.

  • Experience in security applications and systems related audit and accountability Splunk expertise with strong information security experience and have mastered the art of working with regular expressions to effectively extract key tokens of data into meaningful fields.

  • Experience with relational databases is a plus.

  • Experience with application servers being used for the extraction, transformation, and loading (ETL) of operational logs and individuals audit data deposited in a staging area for generating audit analysis reports.

  • Experience with AMDAS on MQ Series will be critical. Cyber security experience.

  • Familiarity with the configuration file options that are not available through the GUI.

  • A sophisticated understanding of Splunk “Search” language. A deep understanding of Splunk Dashboards, Reports, Lookup Tables, and Summary Indexes.

  • Knowledge of how to customize Dashboards via the XML source.

  • Awareness of the Common Information Model and how to apply it directly and indirectly to data feeds.

  • Expert-level capabilities with regular expression.

  • Experience with Splunk Apps (both using and making).

  • Intermediate to Expert -level capability with the Python Scripting Language.

  • Awareness of how to handle null data and its impact on statistical analysis.

  • Experience with reviewing, analyzing and coordinating requirements for ingesting auditable and actionable events into Splunk.

  • This position requires a Top Secret/SCI with Polygraph security clearance.

Desired Requirements (nice to have but not required):

  • Experience with administering Splunk instances, Universal Forwarders

  • Experience designing and implementing medium to large Splunk instances

  • Experience with implementing Splunk within cloud environments

  • Experience implementing Splunk UBA and ES modules

  • Experience writing Splunk Technical Add-ons

Clearance Requirement:

This position requires a Top Secret/SCI with Polygraph security clearance.


Jacobs is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, religion, creed, color, national origin, ancestry, sex (including pregnancy, childbirth, breastfeeding, or medical conditions related to pregnancy, childbirth, or breastfeeding), age, medical condition, marital or domestic partner status, sexual orientation, gender, gender identity, gender expression and transgender status, mental disability or physical disability, genetic information, military or veteran status, citizenship, low-income status or any other status or characteristic protected by applicable law. Learn more about your rights under Federal EEO laws and supplemental language.

Job Software

Primary Location United States-Maryland-Hanover-US MD Hanover - HQ Milestone 1

Job Type Experienced

Req ID: MIS000074