Splunk Enterprise Security

Splunk Enterprise Security Engineer Jobs

18 jobs found

20d ago

Cybersecurity Engineer II

Lyntris San Diego, CA

San Diego, CA

20d ago

$110k - $130k/yr Full time Cybersecurity Tools Ids/ips Information Security

Apply Now

Job Description

Cybersecurity Engineer II role supporting National Security and cybersecurity assessments and engineering defensive solutions across complex DoD environments.

Responsibilities

Plan, execute, and present National Security and cybersecurity assessments, analyses, studies, and technical recommendations
Design, engineer, integrate, test, and deploy cybersecurity and network defense solutions across complex DoD environments
Configure, integrate, and troubleshoot Splunk Enterprise, Splunk Enterprise Security, SIEM, IDS/IPS, firewalls, vulnerability management tools, and network monitoring solutions
Support DoD Computer Network Defense (CND) requirements including boundary defense, vulnerability mitigation, remediation, and risk management activities
Integrate cybersecurity solutions across Windows, Linux/Unix, network infrastructure, servers, security appliances, APIs, and third-party platforms
Perform network and security analysis using Wireshark, Tenable, Splunk, and network taps
Apply automation, scripting, APIs, generative AI, and agentic coding to improve engineering, analysis, testing, and troubleshooting
Coordinate and support vendor integration, testing, demonstrations, and fielding activities, including CONUS and OCONUS events
Collaborate with government, vendors, engineering teams, and international stakeholders to resolve technical issues and reach consensus
Create technical documentation, test procedures, assessment reports, briefings, and customer presentations
Support cybersecurity activities across the acquisition, integration, testing, deployment, and sustainment lifecycle
Support Foreign Military Sales (FMS) programs and international customer engagements as required

Requirements

Active U.S. national security clearance or ability to receive and maintain one
5–7+ years of relevant hands-on experience in cybersecurity, network defense, systems engineering, or National Security
Bachelor’s degree in Computer Engineering, Electrical Engineering, Computer Science, Cybersecurity, Network Engineering, or a related technical field
Experience with enterprise cybersecurity technologies and network defense architectures
Hands-on experience with Splunk Enterprise and Splunk Enterprise Security
Experience with enterprise IDS/IPS and firewall technologies
Experience with vulnerability assessment and management tools such as Tenable Nessus/Tenable.sc
Experience with Wireshark and network traffic analysis
Experience integrating cybersecurity products across complex hardware/software environments
Experience with APIs, scripting, automation, or software development
Strong written, verbal, analytical, and presentation skills
Ability to travel CONUS and OCONUS as required

Technologies

Splunk Enterprise, Splunk Enterprise Security, SIEM
IDS/IPS, firewalls, network monitoring solutions, network taps
Vulnerability management tools: Tenable Nessus, Tenable.sc
Wireshark
Operating systems: Windows, Linux/Unix
APIs, generative AI, agentic coding
Python, PowerShell, Bash, REST APIs
Palo Alto, Cisco Firepower, Trellix NX

Benefits

Paid Time Off
Paid Company Holidays
Medical, Dental & Vision Insurance
Optional HSA and FSA
Base and Voluntary Life Insurance
Short Term & Long-Term Disability Insurance
401k Matching
Employee Assistance Program

Clearance Requirements

Some positions require access to U.S. National Security information
Positions requiring access will require receiving and maintaining a U.S. government personnel security clearance (PCL)
To qualify, the candidate must be a US Citizen and either currently possess National Security eligibility or be able to complete the investigation application process with a favorable determination, and maintain eligibility throughout employment

Location: San Diego, CA (onsite)

Pay range: USD 110,000 - 130,000 per year (San Diego, CA (HDG))

View full job page →

1mo ago

Sr. SecOps Security Engineer

Police and Fire Federal Credit Union Bensalem, PA

Bensalem, PA

1mo ago Closed

Full time Cybersecurity Tools Data Security Endpoint Security

This position is no longer accepting applications (closed Sep 5, 2026).

Job Description

Police and Fire Federal Credit Union is hiring a Sr. SecOps Security Engineer to design, implement, and maintain security architectures while reducing security risk and supporting regulatory compliance.

Responsibilities

Design, implement, and manage Splunk SIEM for centralized security monitoring, advanced threat detection, and incident response improvements
Manage and monitor intrusion detection and prevention systems and respond to suspicious activity
Deploy and maintain network-based DLP solutions and develop data privacy policies
Perform regular vulnerability assessments using tools such as Nessus and support remediation efforts
Deploy zero-day threat protection and develop response strategies
Manage endpoint protection technologies to defend against malware
Implement and support identity and access management (IAM) solutions including Okta and RSA
Architect and configure secure network components including FW, NGFW, and web content filtering
Maintain security architecture documentation and produce regular security posture reports
Work with IT and compliance teams to apply security best practices and guide risk reduction

Requirements

Bachelor’s degree in Computer Science, Information Technology, or a related field; advanced degree or certifications preferred
5+ years of hands-on information security engineering and administration experience
Demonstrated technical knowledge of perimeter security devices and configuration
Proficiency in virtualized environments, including substantial experience with VMware and other virtualization technologies
Strong analytic ability and good judgment to assess problems and situations
Effective business communication and technical writing skills
In-depth knowledge of financial institution regulations, including NCUA, GLBA, and PCI DSS
In-depth working knowledge of network perimeter security technologies, including:
- Web Filter (ForcePoint)
- SIEM (Splunk)
- Intrusion Detection/Protection Systems
- DLP - Network Based Data Loss Prevention
- Vulnerability Scanners (Nessus)
- Zero Day technologies (FireEye/Trellix)
- Email security technologies
- Cisco Secure Workload (CSW)
- Cisco Identity Services Engine (ISE)
- XDR solutions (Cisco AMP, Trellix, MS Defender)
- FireEye (NX and CMS)
- MFA (Okta and RSA)
- StealthWatch
Working knowledge of Security Risk Assessment Methodology, Vulnerability Analysis, and strong knowledge of SIEM technology (Splunk)
Monitor and maintain network security appliances to protect system integrity for internal and external entities
Accurately document current and future InfoSec system configurations and changes following PFFCU change control guidelines
Serve as Tier 2 escalation contact, including rotating after-hours support
Develop a working knowledge of the business side of PFFCU and interface effectively with other IT teams using technology
Strong project skills, including ability to focus and complete multi-month projects
Experience working with third-party service providers
Ability to handle multiple projects, prioritize tasks, and think logically with the ability to visualize abstract concepts
Ability to clearly communicate technical information to all organizational levels and to vendors
Ability to work varying hours, sometimes including evening and weekend work; participate in an on-call rotation
Core hours: Monday–Friday 8:00 AM – 4:00 PM

Technologies

Splunk
Firewalls, NGFW
Web Content Filtering (ForcePoint)
Intrusion detection/protection systems
Data Loss Prevention (network-based DLP)
Nessus
Zero-day threat protection (FireEye/Trellix)
Endpoint protection technologies
Okta, RSA (MFA and IAM)
Identity and access management (IAM) solutions
VMware and virtualization technologies
NetFlow Visibility
StealthWatch
Zero Day platform
FireEye (NX and CMS)
Cisco Secure Workload (CSW)
Cisco Identity Services Engine (ISE)
XDR solutions (Cisco AMP, Trellix, MS Defender)

Benefits

Medical, dental, vision: 75% to 90% of premiums covered by PFFCU
401(k): PFFCU contributes automatic 6% after 1 year (regardless of employee contribution)

View full job page →

1mo ago

Cybersecurity Engineer

Intellibee Richmond, VA

Richmond, VA

1mo ago Closed

Full time Cloud Platforms Cybersecurity Tools Endpoint Security

This position is no longer accepting applications (closed Sep 4, 2026).

Job Description

Intellibee is seeking a Cybersecurity Engineer to design and implement advanced cyber defense capabilities in a hands-on, detection-focused environment. Based in Richmond, VA, this onsite role partners closely with IT and network teams while leveraging Splunk SIEM and Splunk Enterprise Security to monitor, detect, analyze, and respond to security events.

The position emphasizes log analysis, threat hunting, incident response, and the continuous improvement of Splunk detections and compliance reporting.

What you will do

Continuously monitor network traffic, endpoint logs, and cloud security events for anomalous behavior and possible security incidents.
Create, maintain, and tune Splunk correlation searches, alerts, and dashboards to reduce false positives and improve detection coverage.
Investigate potential incidents by following forensic evidence and coordinating with IT and network teams to remediate threats.
Develop and refine detection and response playbooks using threat intelligence and frameworks such as MITRE ATT&CK.
Collaborate with infrastructure teams to onboard new data sources, ensuring log integrity, parsing, and normalization across the SIEM platform.
Support audit readiness by collecting SIEM control evidence and generating compliance reports aligned with internal policies and standards.

Required qualifications

8+ years of hands-on cybersecurity experience, specifically operating, building, and investigating threats within a SIEM or Splunk. (Required: 8 years)
Excellent critical thinking, problem-solving, and communication skills, including the ability to stay calm under pressure and manage multiple security tickets. (Required: 8 years)
Proficiency writing SPL (Splunk Processing Language). (Required: 8 years)
Strong understanding of networking, firewalls, EDR, and cloud platforms such as AWS, Azure, or GCP. (Required: 8 years)
Knowledge of security frameworks (for example, MITRE ATT&CK) and security compliance standards such as NIST, HIPAA, or SOC 2. (Required: 8 years)
Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field. (Required)
Relevant certifications such as Splunk Core Certified User and/or Splunk Core Certified Advanced Power User are highly preferred. (Highly desired: 8 years)

Tools and technologies

Splunk SIEM
Splunk Enterprise Security
Splunk Processing Language (SPL)
MITRE ATT&CK
AWS, Azure, GCP
NIST, HIPAA, SOC 2
EDR

Benefits

Long-Term Stability: Multi-year opportunities with room to grow.
Comprehensive Health Coverage: Healthcare benefits for you and your family.
Future Planning: 401(k) program support.
GC Assistance: Support for immediate Green Card processing, if required.

View full job page →

1mo ago

Security Engineer III, Splunk Architect

Deloitte Arlington, VA

Arlington, VA

1mo ago Closed

$103k - $189k/yr Full time Cloud Platforms Cybersecurity Tools Data Security

This position is no longer accepting applications (closed Sep 4, 2026).

Job Description

Deloitte is seeking a Security Engineer III, Splunk Architect to design, implement, and optimize Splunk solutions for security monitoring, visibility, and enterprise logging strategies. The role blends hands-on engineering with architecture responsibilities to support threat detection, incident response, and compliance monitoring.

Responsibilities

Design, implement, and optimize Splunk architectures to enable security monitoring, log management, and operational analytics.
Develop and maintain Splunk dashboards, alerts, reports, searches, and data models aligned to client and business requirements.
Integrate data sources into Splunk, including infrastructure, cloud, application, and security technologies.
Support development of use cases for threat detection, incident response, compliance monitoring, and operational visibility.
Create and maintain architecture diagrams, technical documentation, implementation standards, and administration procedures.

Required Qualifications

Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related technical field.
Active Top-Secret Clearance.
Ability to work onsite up to 5 days a week in Arlington, VA.
2+ years of experience implementing and supporting Splunk Enterprise or Splunk Cloud.
2+ years developing Splunk dashboards, reports, alerts, and saved searches.
2+ years onboarding and normalizing log sources from infrastructure, applications, cloud platforms, or security tools.
2+ years with SIEM concepts, security monitoring, or threat detection use cases.
Working knowledge of Transmission Control Protocol/Internet Protocol (TCP/IP), networking protocols, and system log analysis.
Experience with Splunk Search Processing Language (SPL), data models, and role-based access controls.
One or more certifications: Splunk Core Certified Power User, Splunk Enterprise Certified Admin, or Splunk Enterprise Security certification.
Ability to travel 20% on average based on client and industry needs.
Legally authorized to work in the United States without employer sponsorship, now or in the future.

Technologies

Splunk Enterprise, Splunk Cloud
Splunk Search Processing Language (SPL)
Splunk dashboards, Splunk data models
Transmission Control Protocol/Internet Protocol (TCP/IP)
SIEM
Python
AWS, Microsoft Azure, Google Cloud Platform (GCP)
Splunk Enterprise Security, Splunk SOAR

Preferred Qualifications

1+ year supporting Splunk in AWS, Microsoft Azure, or GCP.
5+ years with Splunk Enterprise Security, Splunk SOAR, or security orchestration workflows.
5+ years integrating Splunk with endpoint, identity, firewall, or cloud security tools.
1+ year with Python, automation scripting, or infrastructure as code tools.
Experience supporting regulated or federal environments.

Additional Skills

Ability to work independently and collaborate as part of a team.
Effective written and verbal communication skills.
Meticulous attention to detail and quality of work product.
Ability to build and sustain professional relationships.
Ability to lead projects or workstreams.
Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment.
Strong interpersonal skills and professional demeanor.
Ability to meet deadlines and provide clear guidance to others.

Team Overview

Deloitte’s Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity.
The Cyber Defense & Resilience offering helps clients defend against advanced threats by transforming security operations, monitoring technology, data analytics, and threat intelligence.
The team supports managing and protecting dynamic attack surfaces and enables rapid crisis and cyber incident response so clients can be ready for, respond to, and recover from business disruptions.

Location and Salary

Location: Arlington, VA (onsite)

Compensation: USD 102,500 - 188,900 per yearly

Experience Level: 2+ years

View full job page →

1mo ago

Cybersecurity Engineer

Skywalk Global Richmond, VA

Richmond, VA

1mo ago Closed

Full time Cloud Platforms Cloud Security Cyber Forensics

This position is no longer accepting applications (closed Sep 3, 2026).

Job Description

The Cybersecurity Engineer role at Skywalk Global is focused on supporting a Splunk SIEM program to monitor, detect, analyze, and respond to security events. This position emphasizes building high-fidelity Splunk detections, conducting incident investigations, and translating threat intelligence into structured detection and response playbooks.

Location

Richmond, VA (onsite)

Role Summary

As a Cybersecurity Engineer, you will operate and improve Splunk SIEM capabilities by creating and tuning detections, investigating potential security incidents, and developing detection playbooks grounded in threat intelligence and frameworks such as MITRE ATT&CK.

Responsibilities

Continuously monitor network traffic, endpoint logs, and cloud security events for anomalous behavior and potential incidents.
Create, maintain, and tune Splunk correlation searches, alerts, and dashboards to reduce false positives and strengthen detection effectiveness.
Investigate potential security incidents, follow forensic evidence, and partner with IT and network teams to remediate threats.
Develop and refine detection and response playbooks using threat intelligence and frameworks such as MITRE ATT&CK.
Coordinate with infrastructure teams to onboard new data sources, ensuring log integrity, parsing, and normalization across the SIEM platform.
Support audit readiness by collecting SIEM control evidence and generating compliance reports aligned with internal policies and standards.

Required Qualifications

Minimum 8+ years of hands-on cybersecurity experience, operating, building, and investigating threats within a SIEM or Splunk.
Excellent critical thinking, problem-solving, and communication skills, with the ability to stay composed under pressure and manage multiple security tickets.
Proficiency in writing SPL (Splunk Processing Language).
Strong understanding of networking, firewalls, EDR, and cloud platforms including AWS, Azure, or GCP.
Knowledge of security frameworks (e.g., MITRE ATT&CK) and security compliance standards (e.g., NIST, HIPAA, or SOC 2).
Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field.

Preferred Qualifications

Relevant certifications such as Splunk Core Certified User and Splunk Core Certified Advanced Power User.

Technologies

Splunk SIEM
Splunk Enterprise Security
SPL (Splunk Processing Language)
Splunk correlation searches
MITRE ATT&CK
AWS, Azure, GCP
EDR
NIST, HIPAA, SOC 2

View full job page →

1mo ago

Security Engineer

GuidePoint Security Denver, CO 🇺🇸 Remote

Denver, CO

1mo ago Closed

$140k - $170k/yr Full time Cybersecurity Tools Endpoint Security Fortinet Firewall

This position is no longer accepting applications (closed Aug 31, 2026).

Job Description

GuidePoint Security seeks a Security Engineer to join the Denver Heartland team, delivering hands-on network security delivery, client collaboration, and progression toward strategic security advisory.

Responsibilities

Serve as a technical resource for Heartland clients, providing hands-on security support, design guidance, and best-practice recommendations in network security.
Collaborate with sales teams to scope solutions, perform technical discovery, and present architectures aligned with client objectives.
Develop and maintain deep expertise in network security platforms, translating capabilities into measurable business outcomes for clients.
Build trusted advisor relationships with client stakeholders through empathy, active listening, and a commitment to solving their challenges.
Produce clear documentation, including security assessments, architecture recommendations, and implementation guides.
Continuously expand knowledge across adjacent security domains to become a well-rounded security strategist.
Leverage emerging technologies, including AI tools, to work smarter and drive better business outcomes.

Requirements

Network Security Foundation: hands-on experience with concepts such as zero trust, next-generation firewalls, AppID, micro-segmentation, and secure access.
Firewall and Platform Proficiency: practical experience with firewall and network security platforms such as Palo Alto Networks, Checkpoint, and Fortinet.
Troubleshooting Ability: familiarity with common methodologies for diagnosing issues on network security platforms, including firewalls, routing, NAT, and VPN.
Operating System Knowledge: proficiency across Windows, macOS, and Linux.
Security Fundamentals: working knowledge of general security concepts aligned with CISSP domains (certification not required).
Communication Skills: ability to produce clear, concise reports and documentation related to security incidents, system performance, and recommendations.

Technologies

Palo Alto Networks
Checkpoint
Fortinet
Windows
macOS
Linux
CrowdStrike
SentinelOne
Zscaler
Microsoft Defender
Carbon Black
Splunk
Cisco security products
AI tools

Benefits

Remote work primarily (U.S. based); some travel may be required for certain positions, on-site work may be required for Federal positions.
Group Medical Insurance options: Zero Deductible PPO Plan with GuidePoint paying 90% of employee premium and 70% of family premiums, or High Deductible Health Plan with HSA with GuidePoint paying 100% of employee premiums and 75% of family premiums, plus quarterly contributions for the HDHP option.
Group Dental Insurance: GuidePoint pays 100% of the employee premium and 75% of family premiums.
12 corporate holidays and a Flexible Time Off program.
Healthy mobile phone and home internet allowance.
Eligibility for retirement plan after two months via open enrollment.
Pet Benefit Option.

Who You Are

Relentless curiosity and a drive to understand how systems work end-to-end.
Growth mindset with a willingness to learn from feedback and continuously improve.
Emotional intelligence to communicate security advice with empathy and clarity.
Creative problem-solving and persistence when paths are unclear.
Aptitude and readiness to learn over perfection today.
Ability to own priorities and deliver results with minimal supervision.

Where This Role Takes You

Network security delivery
Client-facing support
Technical documentation
Platform expertise
Pre-sales leadership
Solution architecture
Business advisory
Enterprise influence

View full job page →

1mo ago

Principal Security Engineer

Navy Federal Credit Union Vienna, VA

Vienna, VA

1mo ago Closed

$132k - $206k/yr Full time Senior Cloud Cloud Platform

This position is no longer accepting applications (closed Aug 30, 2026).

Job Description

The Principal Security Engineer role at Navy Federal Credit Union is a senior security engineering position focused on maintaining and supporting Palo Alto Prisma Access through Strata Cloud Manager, while providing cybersecurity engineering support across projects, architecture, and infrastructure. The role includes technical direction and design responsibilities intended to bolster the organization’s cybersecurity posture. This is an onsite position based in Vienna, Virginia.

Responsibilities

Provide on call support for major outage issues affecting the Palo Alto Strata Cloud Manager.
Demonstrate advanced expertise in the architecture, design, and deployment of the Palo Alto Strata Cloud Manager product.
Maintain the Palo Alto Prisma Access environment using Strata Cloud Manager.
Develop integrations between Prisma Access and additional cybersecurity solutions.
Act as the liaison between Navy Federal Credit Union and Palo Alto Support.
Contribute to technical design of solutions aligned with use cases and business requirements.
Participate in proofs of concept and technical evaluations, delivering recommendations on technologies, designs, and solutions.
Proactively monitor emerging technologies and threats, assessing their potential adoption within the organization.
Support the development of cybersecurity requirements, design and architecture artifacts, plans, and policies.
Assist in defining security development and test efforts and implementing security controls for networking devices, databases, operating systems, and software components.
Understand and integrate cybersecurity development activities.
Analyze cybersecurity data and test results to inform engineering decisions.
Be part of a team that designs, protects, and manages security services for the organization’s global security infrastructure.
Exhibit strong written, oral, and presentation skills to convey highly technical concepts to audiences ranging from IT administrators to executive decision-makers.
Collaborate with IT stakeholders to understand requirements and position tools to meet those needs.
Lead discussions on engineering solutions and provide clear, strategic recommendations on direction.
Demonstrate self motivation and the ability to self-educate while working effectively in a collaborative environment.

Requirements

Bachelor's Degree in Computer Science, Information Technology, or an equivalent combination of training, education, and experience.
At least 10+ years of total experience in cybersecurity engineering, including on premise and cloud architectures, proxy management, cloud governance, and security controls.
At least 5+ years of direct hands-on experience with Palo Alto Strata Cloud Manager or Panorama and similar leading technology.
At least 3+ years of direct hands-on experience tuning network sensors such as IDS/IPS, DDOS protection, and Cloud Security services.
Domain expertise in network security sensors, including IDS, CASB, virtual network security, DDOS protections, DNS, and related areas.
Detailed understanding of virtual network technologies such as routers, switches, load balancers, firewalls, and proxies.
Minimum of 3 years of related cybersecurity engineering experience.

Technologies

Palo Alto Strata Cloud Manager, Prisma Access, Palo Alto Panorama, IDS/IPS, CASB, Cloud Proxy, SASE, SD-WAN, Web Isolation, Zero Trust Network Access, Splunk, Linux, PowerShell, Python, PKI, SSL, SSH, HTTPS, Azure, Firewalls, Load Balancers, DNS

Compensation

Salary range: USD 131,700 - 206,450 per year.

Additional Information

Hours: Monday through Friday, 8:00 AM to 4:30 PM
Primary Location: 820 Follin Lane, Vienna, VA 22180
Other Locations: 5510 Heritage Oaks Drive, Pensacola, FL 32526; 141 Security Drive, Winchester, VA 22602