Security Engineer III, Splunk Architect (TS Clearance)

About the role

The Deloitte Cyber team specializes in helping businesses navigate cybersecurity challenges and opportunities. We offer powerful solutions and managed services to simplify complexity and enhance operational resilience and security outcomes.

Responsibilities

• Design, implement, and optimize Splunk architectures to support security monitoring, log management, and operational analytics.
• Develop and maintain Splunk dashboards, alerts, reports, searches, and data models aligned to client and business requirements.
• Integrate data sources into Splunk, including infrastructure, cloud, application, and security technologies.
• Support use case development for threat detection, incident response, compliance monitoring, and operational visibility.
• Create and maintain architecture diagrams, technical documentation, implementation standards, and administration procedures.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related technical field.
• Active Top-Secret Clearance.
• 2+ years of experience implementing and supporting Splunk Enterprise or Splunk Cloud.
• Experience developing Splunk dashboards, reports, alerts, and saved searches.
• Experience onboarding and normalizing log sources from infrastructure, applications, cloud platforms, or security tools.
• Understanding of Security Information and Event Management (SIEM) concepts, security monitoring, or threat detection use cases.
• Experience with Splunk Search Processing Language (SPL), data models, and role-based access controls.
• One or more of the following certifications: Splunk Core Certified Power User, Splunk Enterprise Certified Admin, or Splunk Enterprise Security certification.
• Experience with Splunk in Amazon Web Services (AWS), Microsoft Azure, or Google Cloud Platform (GCP).
• Experience supporting regulated or federal environments.

Preferred Qualifications

• 1+ year of experience supporting Splunk in AWS, Azure, or GCP.
• 5+ years of experience with Splunk Enterprise Security, Splunk SOAR, or security orchestration workflows.
• 5+ years of experience integrating Splunk with endpoint, identity, firewall, or cloud security tools.
• Experience with Python, automation scripting, or infrastructure as code tools.

Benefits

We offer competitive compensation, a comprehensive benefits package, and opportunities for professional growth and development.

Pay

$102,500 - $188,900

Schedule

Flexible schedule to accommodate client and industry needs.