Splunk Engineer

Role Overview

The Splunk Engineer will serve as a technical expert responsible for the design, administration, and optimization of the enterprise Splunk environment, with a specialized and heavy focus on User and Entity Behavior Analytics (UEBA). The engineer will bridge the gap between core log management and advanced behavioral analytics by leveraging Splunk User Behavior Analytics (UBA) and machine learning models to detect compromised accounts, insider threats, and lateral movement.

What You Will Do

Lead the design, engineering and deployment of Splunk User Behavior Analytics (UBA), develop, tune, and optimize machine learning models and behavioral algorithms, collaborate with the Insider Threat and SOC teams, perform advanced data normalization and tagging, integrate UEBA-generated anomalies and threats into the Splunk Enterprise Security Incident Review dashboard and Security Orchestration, Automation, and Response (SOAR) playbooks, monitor UEBA system health, and document technical configurations, threat modeling logic, and behavioral detection playbooks.

Why It Might Be a Fit

This position requires a strong background in Splunk, UEBA, and machine learning, as well as experience working in a DoD enterprise network environment. The ideal candidate will have a DoD 8570 IAT II Certification and a DoD TS/SCI clearance.

Requirements

• Min 12 years with HS degree, 10 years with AS/AA degree, 8 years with BS/BA, 6 years with MS/MA, 3 years with PhD
• DoD 8570 IAT II Certification
• DoD TS/SCI clearance

Benefits

• Target Salary Range: $86,000 - $138,000
• Overtime
• Shift differential
• Discretionary bonus