{"schemaVersion":"jobsearcher.job.v1","id":"66fabc2e4e7744af28b2e636","url":"https://jobsearcher.com/jobs/66fabc2e4e7744af28b2e636","canonicalUrl":"https://jobsearcher.com/jobs/66fabc2e4e7744af28b2e636","title":"Splunk Security Engineer","description":"Senior Splunk Security Engineer Input Technology Solutions is seeking an experienced Senior Splunk Engineer with extensive experience in designing, solutioning, building, and maintaining advanced Splunk environments that enable visibility, threat detection, and operational insight across the enterprise and enhances DHS' overall security posture. The Senior Splunk engineer will be responsible for supporting Splunk architecture initiatives, optimizing data ingestion pipelines, integrating diverse security tools, and supporting security automation. This position requires extensive hands-on Splunk engineering experience combined with the ability to analyze a complex security tools environment, identify technical and operational challenges, and lead technical discussions focused on improving reliability, performance, scalability, efficiency, and overall Splunk platform. This role requires someone who can balance strategic technical thinking with the ability to remain hands-on, and actively troubleshoot, engineer, configure, optimize, and resolve issues within the Splunk environment. The Senior Splunk Security Engineer will:Design, implement, and maintain complex Splunk deployments for security monitoring, threat detection, data ingestion, and search optimization Develop and optimize Splunk searches, dashboards, and alerts to enhance security operations Define and manage index clustering, search head clustering, and forwarder deployment. Lead end-to-end Splunk deployment and configuration projects, including infrastructure planning, installation, and integration. Troubleshoot complex Splunk issues involving search performance, indexing, ingestion, parsing, data availability, clustering, storage, authentication, configuration, and integrations with other security tools, as well as providing root-cause analysis of Splunk outages, degradation, data loss, ingestion issues and performance problems. Conduct performance tuning and capacity planning for Splunk Environments Collaborate with cross-functional teams to integrate Splunk with other security tools and data sources and analyze how Splunk interacts with other security tools throughout the broad security ecosystem. Help lead discussions regarding Splunk optimization, modernization, consolidation, automation, scalability, and efficiency and develop recommendations for improving Splunk reliability, and availability Assist with the Cribl to Splunk integration and data pipeline optimization, ensuring efficient routing, filtering, transformation, and delivery data into Splunk as well as improve data quality, reduce ingestion, and enhance overall platform performance Serve as the team's point of contact for security tool operation and management and provide support to Splunk engineers and cross-functional teams. Embed Splunk across a wide range of tools across Enterprise IT operations to ingest endpoint and firewall logs, analyze vulnerability scanning data, enhance privileged access monitoring and audit logging, monitor encryption and key management, and enhance threat detection and incident response. Integrate tools such as CrowdStrike, Cribl, CyberArk, Tenable, CASB, Trellix, Axonius, and others. You'll Bring These Qualifications:Ability to attain DHS EOD and active Top Secret (TS) clearance ITIL V4 Foundations certification (or obtain in first 6 months) MS or equivalent with 12+ years of experience // BA/BS or equivalent +15 years of experience // AA/AS or equivalent + 17+ years of experience // No degree + 21+ years of experience Splunk Certified Architect, Splunk Enterprise Architect, or equivalent advanced Splunk certification 5+ years of experience as a senior Splunk Engineer Significant experience in cybersecurity, with strong hands-on experience in access management and network security 8 or more years of hands-on experience in enterprise IT support Experience with security tools and technologies, like SIEM, IDS/IPS, and firewalls) Professional, customer-oriented, and even-keeled under pressure Effective communicator at all levels, both written and verbal These Qualifications Would be Nice to Have:Splunk Certified Admin or Architect certification Experience with cloud security and Splunk Cloud deployments Knowledge of scripting languages (Python, Bash) and regular expressions Experience with Cribl LogStream and Cribl Edge Knowledge of machine learning and advanced analytics in security contexts Security +, CEH, GPEN, OSEP, GSEC, etc. CISSP certification/Information Systems Security Engineering Professional (ISSEP)","company":"Input Technology Solutions","rawCompany":"input technology solutions","city":"Oxon Hill","state":"MD","isRemote":false,"isActive":false,"createdAt":"2026-11-02T01:12:17.981Z","occupations":[{"code":"15-1299.05","title":"Information Security Engineers","slug":"information-security-engineers"},{"code":"15-1299.08","title":"Computer Systems Engineers/Architects","slug":"computer-systems-engineers-architects"},{"code":"15-1212.00","title":"Information Security Analysts","slug":"information-security-analysts"}],"industries":[{"code":"541512","title":"Computer Systems Design Services","slug":"computer-systems-design-services"},{"code":"541519","title":"Other Computer Related Services","slug":"other-computer-related-services"},{"code":"541511","title":"Custom Computer Programming Services","slug":"custom-computer-programming-services"}],"jobPosting":{"@context":"https://schema.org","@type":"JobPosting","title":"Splunk Security Engineer","description":"Senior Splunk Security Engineer Input Technology Solutions is seeking an experienced Senior Splunk Engineer with extensive experience in designing, solutioning, building, and maintaining advanced Splunk environments that enable visibility, threat detection, and operational insight across the enterprise and enhances DHS' overall security posture. The Senior Splunk engineer will be responsible for supporting Splunk architecture initiatives, optimizing data ingestion pipelines, integrating diverse security tools, and supporting security automation. This position requires extensive hands-on Splunk engineering experience combined with the ability to analyze a complex security tools environment, identify technical and operational challenges, and lead technical discussions focused on improving reliability, performance, scalability, efficiency, and overall Splunk platform. This role requires someone who can balance strategic technical thinking with the ability to remain hands-on, and actively troubleshoot, engineer, configure, optimize, and resolve issues within the Splunk environment. The Senior Splunk Security Engineer will:Design, implement, and maintain complex Splunk deployments for security monitoring, threat detection, data ingestion, and search optimization Develop and optimize Splunk searches, dashboards, and alerts to enhance security operations Define and manage index clustering, search head clustering, and forwarder deployment. Lead end-to-end Splunk deployment and configuration projects, including infrastructure planning, installation, and integration. Troubleshoot complex Splunk issues involving search performance, indexing, ingestion, parsing, data availability, clustering, storage, authentication, configuration, and integrations with other security tools, as well as providing root-cause analysis of Splunk outages, degradation, data loss, ingestion issues and performance problems. Conduct performance tuning and capacity planning for Splunk Environments Collaborate with cross-functional teams to integrate Splunk with other security tools and data sources and analyze how Splunk interacts with other security tools throughout the broad security ecosystem. Help lead discussions regarding Splunk optimization, modernization, consolidation, automation, scalability, and efficiency and develop recommendations for improving Splunk reliability, and availability Assist with the Cribl to Splunk integration and data pipeline optimization, ensuring efficient routing, filtering, transformation, and delivery data into Splunk as well as improve data quality, reduce ingestion, and enhance overall platform performance Serve as the team's point of contact for security tool operation and management and provide support to Splunk engineers and cross-functional teams. Embed Splunk across a wide range of tools across Enterprise IT operations to ingest endpoint and firewall logs, analyze vulnerability scanning data, enhance privileged access monitoring and audit logging, monitor encryption and key management, and enhance threat detection and incident response. Integrate tools such as CrowdStrike, Cribl, CyberArk, Tenable, CASB, Trellix, Axonius, and others. You'll Bring These Qualifications:Ability to attain DHS EOD and active Top Secret (TS) clearance ITIL V4 Foundations certification (or obtain in first 6 months) MS or equivalent with 12+ years of experience // BA/BS or equivalent +15 years of experience // AA/AS or equivalent + 17+ years of experience // No degree + 21+ years of experience Splunk Certified Architect, Splunk Enterprise Architect, or equivalent advanced Splunk certification 5+ years of experience as a senior Splunk Engineer Significant experience in cybersecurity, with strong hands-on experience in access management and network security 8 or more years of hands-on experience in enterprise IT support Experience with security tools and technologies, like SIEM, IDS/IPS, and firewalls) Professional, customer-oriented, and even-keeled under pressure Effective communicator at all levels, both written and verbal These Qualifications Would be Nice to Have:Splunk Certified Admin or Architect certification Experience with cloud security and Splunk Cloud deployments Knowledge of scripting languages (Python, Bash) and regular expressions Experience with Cribl LogStream and Cribl Edge Knowledge of machine learning and advanced analytics in security contexts Security +, CEH, GPEN, OSEP, GSEC, etc. CISSP certification/Information Systems Security Engineering Professional (ISSEP)","datePosted":"2026-11-02T01:12:17.981Z","dateModified":"2026-11-02T01:12:17.981Z","hiringOrganization":{"@type":"Organization","name":"Input Technology Solutions","sameAs":"https://jobsearcher.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Oxon Hill","addressRegion":"MD","addressCountry":"US"}},"identifier":{"@type":"PropertyValue","name":"JobSearcher","value":"66fabc2e4e7744af28b2e636"},"url":"https://jobsearcher.com/jobs/66fabc2e4e7744af28b2e636"}}