Senior Splunk Engineer

Responsibilities

• Design and implement scalable, highly available Splunk architectures across on-premises, cloud, and hybrid environments, including index strategies, clustering, and data retention policies
• Lead the installation, configuration, and ongoing administration of Splunk Enterprise and Splunk Enterprise Security, managing core components such as indexers, search heads, forwarders, and cluster infrastructure
• Optimize data ingestion, parsing, indexing, and search performance while onboarding new data sources and ensuring data quality, normalization, and platform reliability
• Develop and maintain SIEM capabilities, including use cases, correlation searches, alerts, dashboards, and threat detection aligned to frameworks such as MITRE ATT&CK
• Partner with SOC and security teams to support threat hunting and incident investigations, while establishing governance standards, best practices, and automation for Splunk operations

Qualifications

• 5+ years of experience in Splunk Engineering/Architecture with a focus on backend infrastructure (not dashboard development)
• Active Secret Clearance required; must work onsite in RTP five days per week
• Strong expertise designing and managing scalable Splunk environments, including clustering, data retention, and system performance
• Hands-on experience with Splunk Enterprise/Enterprise Security, including data ingestion, parsing, and platform optimization
• Experience supporting security operations, including SIEM engineering, threat detection, and collaboration with SOC teams

Pay

$140,000-$180,000

Schedule

Onsite 5 days a week in Morrisville, NC

Benefits

• Medical
• Dental
• Vision
• 401k
• PTO
• Sick leave if required by law
• Holidays