Splunk Engineer

Ashburn is seeking a Senior Splunk Engineer to support a federal cybersecurity architecture opportunity. This Key Personnel role will support enterprise SIEM operations, Splunk architecture, data ingestion, dashboards, alerting, analytics, secure configuration, and performance optimization in a complex Government environment for a proposal opportunity.

Primary Responsibilities

• Architect, deploy, operate, and maintain enterprise Splunk infrastructure.

• Support SIEM data ingestion, indexing, normalization, dashboarding, alerting, and operational reporting.

• Develop dashboards and visualizations for security, operations, and mission stakeholders.

• Manage Splunk configurations, search/index clusters, data models, alerts, reports, saved searches, and knowledge objects.

• Support account/access management, server management, monitoring, patching, Splunk version upgrades, and app/add-on maintenance.

• Improve log source coverage and quality across enterprise systems and applications.

• Use scripting and automation to improve SIEM operations and support security analytics.

• Support federal cybersecurity standards, secure configuration, and audit-ready documentation.