SOC Engineer 2 - Secret Clearance

Responsibilities

• Develop and optimize Splunk Enterprise Security detections, dashboards, and correlation searches to improve threat visibility
• Build and maintain Splunk SOAR playbooks to automate incident response workflows
• Troubleshoot ingestion, indexing, and search performance issues within distributed Splunk environments
• Investigate alerts and support incident response efforts across AWS and integrated security tools
• Work directly with SOC analysts and engineers to enhance detection coverage and security operations efficiency

Qualifications

• 3+ years of experience in SIEM Engineering, Security Operations, or Incident Response
• Strong Splunk expertise (SPL queries, dashboards, data normalization, Enterprise Security)
• Experience with AWS configurations and integrating cloud security tools into SIEM environments
• Bachelor’s degree in Cybersecurity, Information Technology, or related field (or equivalent experience)
• Active Secret Clearance (non-negotiable)

Pay

• Salary range: $105,000-$125,000 annually, based on experience

Schedule

• This is a hybrid role, working 2 days per week onsite in Fulton, MD (Tuesday/Thursday)