Sr. Splunk / SIEM Engineer (TS Required)

Position Summary

August Schell is seeking a Senior Splunk / SIEM Engineer with advanced hands-on experience in designing, deploying, and maintaining large-scale Splunk environments. This role requires strong technical capabilities in troubleshooting complex system issues, creating custom dashboards, and managing Splunk clusters aligned with best practices. The candidate will support a Department of Defense customer from the Mark Center in Alexandria, VA (hybrid role).

Minimum Qualifications (Knowledge, Skills, and Abilities)

• Bachelor’s degree in computer science, Information Systems, Information Assurance or other relevant field.
• At least five (5) years of experience in Splunk administration or engineering roles
• Knowledge of Splunk architecture, deployment models, and indexing best practices
• At least ten (10) years of overall Cybersecurity experience.
• At least five (5) years of SIEM experience
• Experience with vulnerability scanning, STIGs, database tuning, and network virtualization technologies
• Proficiency in creating custom dashboards and advanced queries
• Must hold a current Splunk Administrator Certification
• Must possess a valid DoD 8570 IAT-II certification (ex. Security+)
• Active Top Secret clearance is required; must be able to maintain a Top Secret clearance.
• Strong problem-solving skills and ability to work independently or within a team
• Excellent written and verbal communication skills
• DoD 8570 CSSP Analyst Certification desired
• Familiarity with DevOps and automation tools such as Ansible or Terraform
• Knowledge of compliance frameworks and reporting (RMF, NIST 800-53)
• Experience with Enterprise Security (ES) and/or ITSI modules within Splunk
• Experience with Elastic
• Familiarity with Linux and Windows server environments

Essential Duties and Responsibilities

• Deploy, configure, and maintain complex Splunk clusters across varied hardware platforms
• Develop and optimize advanced Splunk dashboards and queries to support mission-critical operations
• Troubleshoot and resolve issues within large-scale, complex Splunk environments
• Implement best practices for indexing, data transformation, and system architecture
• Collaborate with cybersecurity and network teams to integrate Splunk with enterprise monitoring solutions
• Support vulnerability and STIG scanning operations and interpret outputs for system compliance
• Manage virtual environments including VRFs and VLAN
• Perform system updates, patching, and ensure compliance with DoD cybersecurity requirements
• Document configurations and operational procedures for audit and continuity purposes