> Markdown version of [/jobs/ext/124761-sr-splunk-migration-engineer](https://www.wearedevelopers.com/jobs/ext/124761-sr-splunk-migration-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Sr Splunk Migration Engineer

- **Company:** MarineTraffic
- **Location:** United States
- **Experience:** Expert
- **Salary:** $26,000.0
- **Contract:** Permanent contract
- **Skills:** Amazon Elastic Compute Cloud, Bash Shell, Cyber Security, Elasticsearch, Intrusion Detection and Prevention, Python (Programming Language), Security Information and Event Management, Kubernetes, Kibana, Splunk, Data Pipelines
- **Published:** May 14, 2026
- **Apply:** https://www2.jobdiva.com/portal/?a=j7jdnwgck4wulo816y7l865pzq556q05f5cqdk65b0o0dpy0m5p196w9a9ln1g3w&compid=0/jobs/32301689#/jobs/32301689

## About the Role

* 5+ years' experience in SIEM engineering or security operations
 * Hands-on experience with Elastic Stack (Elasticsearch, Kibana, Elastic Security)
 * Proven experience migrating from Splunk to Elastic or similar SIEM platforms
 * Strong understanding of:SIEM data models and schemas
 * Elastic Common Schema (ECS) Field Mappings
 * Detection engineering and alert tuning
 * Experience with Kubernetes and the ECK deployment model
 * Strong scripting or automation skills (Python, Bash, etc.)
 * Provide post-cutover from legacy platforms to Elastic, ensuring continuity of operations
 * Migrate an existing Splunk SIEM environment (approximately 6 TB/day of data) to Elastic SIEM.
 * Active TS clearance

## Description

Marathon TS is seeking a highly skilled Splunk to Elastic Migration Engineer to lead and execute end-to-end SIEM modernization initiatives. This role is responsible for designing and implementing Elastic deployments using the Elastic Cloud on Kubernetes (ECK) model, migrating legacy Splunk knowledge objects, detections, and data pipelines, and ensuring operational readiness through cutover validation and workflow integrations. The ideal candidate has deep hands-on experience with SIEM engineering, detection engineering, Elastic Stack architecture, and security operations workflows-particularly within enterprise or federal environments.


## Related Videos

- [Better Together: Leveraging Your Observability Tools as a SIEM](https://www.wearedevelopers.com/videos/2118-better-together-leveraging-your-observability-tools-as-a-siem)
- [Old tools, new tricks](https://www.wearedevelopers.com/videos/1916-old-tools-new-tricks)
- [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture)
- [Debug a Kubernetes Operator](https://www.wearedevelopers.com/videos/487-debug-a-kubernetes-operator)
- [Add Location-based Searching to Site with ElasticSearch](https://www.wearedevelopers.com/videos/77-add-location-based-searching-to-site-with-elasticsearch)
- [Serverless Observability: where SLOs meet transforms](https://www.wearedevelopers.com/videos/854-serverless-observability-where-slos-meet-transforms)

## Related Articles

- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)
- [Dev Digest 131 - AI'm not sure about OSS](https://www.wearedevelopers.com/magazine/472-dev-digest-131-ai-m-not-sure-about-oss)
- [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)
- [DevOps Engineer Salary [2023]](https://www.wearedevelopers.com/magazine/203-devops-engineer-salary-2023)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)