> Markdown version of [/jobs/ext/1226929-senior-splunk-engineer](https://www.wearedevelopers.com/jobs/ext/1226929-senior-splunk-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Splunk Engineer

- **Company:** Zachary Piper
- **Location:** Morrisville, NC, United States
- **Experience:** Expert
- **Salary:** $140,000.0 - $180,000.0
- **Contract:** Permanent contract
- **Skills:** Cluster Analysis, Program Optimization, Cyber Security, Data Retention, Intrusion Detection and Prevention, Parsing, Security Information and Event Management, Data Ingestion, System Availability, Mitre Att&ck, Indexer, Backend, SC Clearance, Cybercrime, Splunk
- **Published:** July 10, 2026
- **Apply:** https://www.clearancejobs.com/jobs/9022477/senior-splunk-engineer

## About the Role

* 5+ years of experience in Splunk Engineering/Architecture with a focus on backend infrastructure (not dashboard development)
 * Active Secret Clearance required; must work onsite in RTP five days per week
 * Strong expertise designing and managing scalable Splunk environments, including clustering, data retention, and system performance
 * Hands-on experience with Splunk Enterprise/Enterprise Security, including data ingestion, parsing, and platform optimization
 * Experience supporting security operations, including SIEM engineering, threat detection, and collaboration with SOC teams

## Description

* Design and implement scalable, highly available Splunk architectures across on-premises, cloud, and hybrid environments, including index strategies, clustering, and data retention policies
 * Lead the installation, configuration, and ongoing administration of Splunk Enterprise and Splunk Enterprise Security, managing core components such as indexers, search heads, forwarders, and cluster infrastructure
 * Optimize data ingestion, parsing, indexing, and search performance while onboarding new data sources and ensuring data quality, normalization, and platform reliability
 * Develop and maintain SIEM capabilities, including use cases, correlation searches, alerts, dashboards, and threat detection aligned to frameworks such as MITRE ATT&CK
 * Partner with SOC and security teams to support threat hunting and incident investigations, while establishing governance standards, best practices, and automation for Splunk operations


## Related Videos

- [Optimizing Discovery: PostgreSQL's Role in Transforming GetYourGuide's Search](https://www.wearedevelopers.com/videos/1647-optimizing-discovery-postgresql-s-role-in-transforming-getyourguide-s-search)
- [Tips and Tricks for Working with JSON](https://www.wearedevelopers.com/videos/1229-tips-and-tricks-for-working-with-json)
- [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Dynamic Entities in .NET: Building Low-Code Systems on Top of Entity Framework Core](https://www.wearedevelopers.com/videos/100218-dynamic-entities-in-net-building-low-code-systems-on-top-of-entity-framework-core)
- [Building a Compiler with C#](https://www.wearedevelopers.com/videos/116-building-a-compiler-with-c)

## Related Articles

- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)
- [Software Developer Salary in Switzerland [2023]](https://www.wearedevelopers.com/magazine/215-software-developer-salary-in-switzerland-2023)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Dev Digest 162: AI careers, MCP, AWS best practices & floppy sweaters](https://www.wearedevelopers.com/magazine/571-dev-digest-162-ai-careers-mcp-aws-best-practices-floppy-sweaters)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)