Senior Splunk Engineer

Team: IT

Location: US

Commitment: Full-time

Workplace Type: remote

Accountabilities

• Engineer, deploy, configure, and maintain enterprise Splunk SIEM environments, including applications, integrations, dashboards, alerts, reports, and interfaces.
• Optimize Splunk infrastructure performance, availability, and scalability by improving data ingestion, query performance, scheduling, and system health.
• Design, develop, and implement Splunk solutions using established system development lifecycle (SDLC) methodologies and industry best practices.
• Support Splunk Enterprise Security capabilities, Common Information Model (CIM) compliance, and Risk-Based Alerting (RBA) implementations.
• Manage and monitor Linux-based server infrastructure supporting SIEM operations, including configuration updates and software upgrades.
• Develop and maintain technical solutions for connecting enterprise data sources and improving security visibility.
• Troubleshoot complex technical issues across multiple systems, applications, and security platforms while providing effective remediation strategies.
• Create technical documentation, change management plans, and recommendations to improve operational efficiency and data availability.
• Provide technical guidance, mentoring, and knowledge sharing to junior engineers and security team members.
• Collaborate with technical stakeholders to evaluate emerging technologies, introduce improvements, and strengthen security capabilities.

Requirements

• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, Mathematics, Engineering, or a related technical discipline.
• Minimum of 6 years of experience in IT infrastructure, networking, architecture, administration, cybersecurity, or related technical fields.
• At least 6 years of hands-on Splunk experience, including 3+ years supporting large-scale enterprise Splunk environments.
• Required certification: Certified Splunk Architect.
• Strong expertise in Splunk Enterprise Security, Splunk Common Information Model (CIM), and Risk-Based Alerting (RBA).
• Extensive experience with SIEM platforms, security event correlation, and enterprise security monitoring solutions.
• Advanced knowledge of Splunk backend operations, administration, integrations, and technical add-on development.
• Experience with Linux administration, shell scripting, PERL, Regex, and troubleshooting complex technical environments.
• Ability to analyze, optimize, and secure application solutions through data-driven problem solving.
• Strong understanding of system architecture, data flows, and interconnections between enterprise systems.
• Excellent communication skills with the ability to collaborate effectively with technical teams, leadership, and stakeholders.
• Ability to work independently, manage multiple priorities, and provide accurate documentation with minimal supervision.
• Ability to obtain and maintain Public Trust-level access and required security clearances.
• Additional certifications such as CEH, CySA+, GSEC, CISM, CCNA, Security+, Server+, Cloud+, or advanced Splunk certifications are preferred.

Benefits

• Competitive salary range of $125,000–$150,000, based on location, experience, and technical qualifications.
• Comprehensive medical, dental, and vision insurance coverage.
• 401(k) retirement plan with immediate vesting.
• Short-term disability, long-term disability, basic life insurance, and AD&D coverage.
• Paid time off and federal holiday observances.
• Family planning and fertility assistance programs.
• Employee Assistance Program (EAP) and legal-aid support.
• Professional development opportunities and training assistance.
• Opportunity to work on advanced cybersecurity solutions supporting critical government missions.
• Collaborative environment focused on innovation, technical excellence, and continuous learning.