Cyber Splunk Subject Matter Expert

Cyber Splunk SME (Insider Threat Engineer) – Maryland. (On-site) Note: No C2C Profile. It's Purely a W2 Contract Role. We are seeking an experienced Cyber Splunk Subject Matter Expert to join our team as an Insider Threat Engineer. This pivotal role focuses on engineering, automation, and advanced cyber threat detection to protect critical systems and sensitive data. Key Responsibilities: • Engineer and maintain User Activity Monitoring (UAM) solutions for continuous visibility into user and privileged behaviors. • Build and optimize Splunk dashboards to visualize insider threat indicators and program metrics. • Automate detection, alerting, and reporting workflows using Ansible, Python, and JSON. • Integrate UAM with enterprise cybersecurity tools such as SIEM, DLP, EDR, and SOAR. • Collaborate with SOC, forensic analysts, and threat intel teams to enhance UAM context. • Develop and refine methods to analyze and correlate data for proactive insider threat detection. • Monitor cyber activity trends and assess risks to confidentiality, availability, and integrity. • Assist with SOP development and deliver clear, insightful briefings and reports to leadership. Required Qualifications: • Bachelor’s degree in Cybersecurity, IT, Computer Science, or related field plus 7+ years relevant experience. • Proven experience deploying and managing User Activity Monitoring solutions in production. • Expertise in Splunk dashboard design, data ingestion, and search optimization. • Hands-on skills with Ansible, Python, and JSON for automation. • Strong understanding of networking, Palo Alto firewalls, endpoint monitoring, SIEM/SOAR integrations, and identity-based risk scoring. • Experience working in classified environments and delivering briefings in SCIF settings. • Knowledge of NIST 800-53 controls and insider threat programs. • Ability to obtain and maintain Public Trust clearance. • Strong analytical, communication, and problem-solving skills. Highly Desired: • Security certifications such as CISSP, CISM, CEH, or CompTIA Security+. • Familiarity with federal cybersecurity regulatory requirements and compliance. • Experience with behavioral analytics, DLP, EDR platforms. • Programming and automation expertise. Note: This position requires working onsite at Woodlawn, MD. If you are a cybersecurity professional passionate about insider threat detection and ready to make an impact in a critical federal environment, apply today. Join us to engineer the future of insider threat defense! #CyberSecurity #Splunk #InsiderThreat #Automation #WoodlawnMD #CyberEngineer #PublicTrust This job post captures the key skills and responsibilities from the detailed JD in a concise, engaging format for LinkedIn recruitment.