> Markdown version of [/jobs/ext/1423636-splunk-enterprise-security-es-consultant](https://www.wearedevelopers.com/jobs/ext/1423636-splunk-enterprise-security-es-consultant). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Splunk Enterprise Security (ES) Consultant

- **Company:** Stem
- **Location:** Reston, VA, United States
- **Contract:** Permanent contract
- **Skills:** Intrusion Detection and Prevention, Information Systems Security Architecture Professional, Python (Programming Language), Windows PowerShell, Security Information and Event Management, Scripting, Kubernetes, Cybercrime, Splunk, Security Orchestration, Automation & Response
- **Published:** July 24, 2026
- **Apply:** https://www.clearancejobs.com/jobs/9050185/splunk-enterprise-security-es-consultant

## About the Role

* Active TS/SCI with CI Polygraph.
 * U.S. Citizenship.
 * Splunk Core Consultant Certification.
 * Splunk Enterprise Security Certification.
 * Experience administering and optimizing Splunk Enterprise Security in enterprise environments.
 * Knowledge of CIM, SIEM architecture, threat detection, incident response, and security automation.
 * Experience with Kubernetes, Splunk SOAR, Mission Control, and scripting (Python or PowerShell) is highly desired.

## Description

* Assess existing Splunk ES environments and implement Splunk best practices.
 * Design secure architectures and integrate enterprise security tools.
 * Support Splunk migration to Kubernetes.
 * Configure, administer, and optimize Splunk Enterprise Security (ES).
 * Normalize data for CIM compliance and onboard new data sources.
 * Develop and tune correlation searches, dashboards, and risk-based alerting.
 * Improve SIEM performance by reducing false positives and optimizing searches.
 * Support incident response, threat hunting, and security analytics.
 * Automate workflows using Splunk SOAR and Mission Control.
 * Develop strategic recommendations and roadmaps for Splunk ES modernization.


## Related Videos

- [Understanding Kubernetes in a visual way](https://www.wearedevelopers.com/videos/100085-understanding-kubernetes-in-a-visual-way)
- [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java)
- [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Instant KAI Sandboxes with vCluster: Multi-Tenant, Multi-Scheduler GPU Sharing](https://www.wearedevelopers.com/videos/100333-instant-kai-sandboxes-with-vcluster-multi-tenant-multi-scheduler-gpu-sharing)
- [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script)

## Related Articles

- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)