Senior Splunk Engineer

• You will strengthen the organization’s cyber defense posture by engineering, optimizing, and maintaining Splunk based security monitoring and analytics capabilities. In this role, you transform cybersecurity requirements into actionable detection logic, dashboards, data models, and workflows that support continuous monitoring and incident response operations.
• Key responsibilities include working closely with cybersecurity teams to understand threat scenarios, developing and tuning correlation searches, and engineering data ingestion pipelines for high value security log sources. You will create dashboards, visualizations, and alerts to support threat hunting, incident investigations, and compliance reporting.
• You may also contribute to solution design activities such as data mapping, field extraction, log onboarding strategies, and proof of concept integrations.
• Additionally, you will validate detection logic through testing, troubleshoot data quality issues, and ensure Splunk content aligns with security policies, operational needs, and mission requirements.

• 2-9+ years relevant experience with Bachelors in related field OR
• 0-7+ years experience with Masters in related field OR
• High School Diploma or equivalent and 6-13+ years relevant experience.
• 7+ years implementing and maintaining CND technologies on enterprise WANs
• 4+ years experience with SIEM and/or vulnerability scanner products
• 4+ years experience maintaining and operating Red Hat Enterprise Linux (RHEL) servers.

• Active TS/SCI w/ ability to obtain and maintain a CI poly.

• 4+ years experience with Splunk (or equivalent SIEM)
• 4+ years Tenable/ACAS (or equivalent vulnerability scanner), experience evaluating technologies against DISA STIGs and providing remediation guidance.
• Associate to Intermediate-level Splunk certification (e.g., Splunk Enterprise Certified Admin)
• Intermediate to Advanced Spunk certifications (e.g., Splunk Enterprise Security Certified Admin, Splunk IT Service intelligence certified admin, Splunk SOAR Certified Automation Developer) Ansible, or equivalent related coursework.

The selected candidate will contribute to a high-impact government program focused on enhancing and securing mission-critical systems and environments. The program is scheduled to launch in early 2026 and due to the classified nature of the mission and the sensitivity of the operational environment, an active TS/SCI security clearance will be required. Candidate must be willing to obtain and maintain a CI poly.

Information Assurance Engineer 2: $85,371 - $118,529

Information Assurance Engineer 3: $104,519 - $140,599

Information Assurance Engineer 4: $135,472 - $192,103

This opportunity resides with , a business group within HII’s Mission Technologies division. Warfare Systems comprises cyber and mission IT; electronic warfare; and C5ISR systems.

HII works within our nation’s intelligence and cyber operations communities to defend our interests in cyberspace and anticipate emerging threats. Our capabilities in cybersecurity, network architecture, reverse engineering, software and hardware development uniquely enable us to support sensitive missions for the U.S. military and federal agency partners.

Our team of more than 7,000 professionals worldwide delivers all-domain expertise and advanced technologies in service of mission partners across the globe. Mission Technologies is leading the next evolution of national defense - the data evolution - by accelerating a breadth of national security solutions for government and commercial customers. Our capabilities range from C5ISR, AI and Big Data, cyber operations and synthetic training environments to fleet sustainment, environmental remediation and the largest family of unmanned underwater vehicles in every class. Find the role that’s right for you. Apply today. We look forward to meeting you., HII’s Mission Technologies division is dedicated to delivering cutting-edge solutions that advance national security and defense objectives. This position is part of our Cyber and Intelligence division, which plays a critical role in supporting Enterprise-Level Security and Modernization efforts across IT infrastructure, cybersecurity, physical facilities, and personnel operations.