[Remote] Cyber Risk Defense Consultant V - Splunk & Cribl Engineer

Note: The job is a remote job and is open to candidates in USA. Kaiser Permanente is expanding its Cyber Risk Defense program and is looking for a skilled individual to support their Cyber Security mission as a Cyber Risk Defense Consultant V specializing in Splunk and Cribl engineering. The role involves managing an enterprise Splunk environment, overseeing security data integrity, and leading incident response and threat detection efforts.ResponsibilitiesConducts or oversees business-specific projects by applying deep expertise in subject area; promoting adherence to all procedures and policies; developing work plans to meet business priorities and deadlines; determining and carrying out processes and methodologies; coordinating and delegating resources to accomplish organizational goals; partnering internally and externally to make effective business decisions; solving complex problems; escalating issues or risks, as appropriate; monitoring progress and results; recognizing and capitalizing on improvement opportunities; evaluating recommendations made; and influencing the completion of project tasks by othersPractices self-leadership and promotes learning in others by building relationships with cross-functional stakeholders; communicating information and providing advice to drive projects forward; influencing team members within assigned unit; listening and responding to, seeking, and addressing performance feedback; adapting to competing demands and new responsibilities; providing feedback to others, including upward feedback to leadership and mentoring junior team members; creating and executing plans to capitalize on strengths and improve opportunity areas; and adapting to and learning from change, difficulties, and feedbackLeads team in the proactive monitoring and/or response to known or emerging threats against the KP networkEffectively communicates investigative findings to non-technical audiencesPlans and facilitates regular operations meeting with Cyber Risk Defense Center (CRDC) teamsSupports closed loop processes on security efforts by providing feedback to the TDA leads and/or leadershipParticipates in information fusion procedures across operations and engineering, including activities such as Use Case planning/development, Use Case quality assurance validation, and response procedure documentationServes as a liaison between stage teams and upper management by identifying issues, improvement areas, or security/architectural gaps and suggesting appropriate improvementsDrives the development of the CRDC intellectual capital by leading process or procedure improvements, consulting on brown bag training sessions, and leading the development of new training documentsPartners with the CRDC Policy Engineers and Remediation teams to contain identified issues and determine the best approach for improving security postureFacilitates follow-up remediation design and review effortsLeads the investigation and triage of security events across multiple domainsLeads complex data analyses in support of security event management processes, including root cause analysisCoordinates the response and resolution of high impact or critical cyber security incidentsLeads the deployment of threat detection capabilities and/or incident response plans which may include after-hours support and coordination among responsible teamsDrives the execution of incident detection and/or handling processes which may include containment, protection, and remediation activitiesSkillsMinimum two (2) years in an informal leadership role working with project or technical teamsBachelors degree in Business Administration, Computer Science, Social Science, Mathematics, or related field and Minimum eight (8) years experience in IT or a related field, including Minimum two (2) years in information security or network engineering. Additional equivalent work experience may be substituted for the degree requirementOne (1) year supervisory experienceTwo (2) years of work experience in a role requiring interaction with senior leadership (e.g., Director level and above)Knowledge and professional enterprise experience supporting Splunk Enterprise and Splunk Cloud environmentsPossess Splunk Architect and/or Splunk Administration Certification(s)Possess software development skills creating AI and ML models and detectionsProfessional experience and administration of large-scale Linux/Unix deploymentsCompany OverviewKaiser Permanente is a health organization that offers disease prevention, mental healthcare, and chronic disease management services. It was founded in 1945, and is headquartered in Oakland, California, USA, with a workforce of 10001+ employees. Its website is https://healthy.kaiserpermanente.org.Company H1B SponsorshipKaiser Permanente has a track record of offering H1B sponsorships, with 1 in 2026, 3 in 2025, 1 in 2024. Please note that this does not guarantee sponsorship for this specific role.