> Markdown version of [/jobs/ext/2710139-security-engineer-splunk](https://www.wearedevelopers.com/jobs/ext/2710139-security-engineer-splunk). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Engineer - Splunk - **Company:** Ultraviolet Cyber - **Location:** United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Audit Trail, User Authentication, Cloud Computing Security, Cluster Analysis, CompTIA Security+, Cyber Security, Data Loss, Query Languages, IT Management, Intrusion Detection and Prevention, Key Management, Search Algorithms, Parsing, Performance Tuning, Zero Trust Network Access, Security Information and Event Management, Systems Integration, Data Ingestion, Cyberark, System Availability, Indexer, Splunk, Data Pipelines, Vulnerability Analysis - **Published:** September 4, 2026 - **Apply:** https://startup.jobs/senior-security-engineer-splunk-ultraviolet-cyber-9482123 ## About the Role * US Citizenship is Required for hire and ability to clear Government clearance process * Master's degree in Cybersecurity, Information Security, or related field, plus 12 years of experience * 7+ years of security engineering experience with 3+ years of advanced Splunk implementation * Splunk Certified Architect or Splunk Certified Enterprise Security Admin certification * Experience designing and implementing Splunk Enterprise Security in large environments, along with Cribl * Strong knowledge of SPL query language and advanced search techniques * Experience creating custom Splunk dashboards, reports, and visualizations * Demonstrated expertise in security monitoring and SIEM technology * Experience implementing security controls per NIST SP 800-53 requirements * Proficiency with Splunk administration and performance tuning, * Experience supporting federal agency security operations centers * Splunk and Cribl certifications highly desired * Additional security certifications (CISSP, GCIA, GCIH, Security+) * Experience with Splunk implementations * Background in security architecture for government networks * Knowledge of CISA directives and CDM program requirements * Experience with cloud security monitoring using Splunk and Cribl * Familiarity with Zero Trust architecture implementation Work Environment: * Hybrid work model with 3 day/week on-site presence near National Harbor, Maryland * Must be able to pass a Federal background investigation - US Citizenship required * Participation in on-call rotation for security incident response * Collaboration with cross-agency security teams ## Description * Design, implement, and maintain complex Splunk deployments for security monitoring, threat detection, data ingestion, and search optimization * Document and map the architecture of current Splunk infrastructure and lead the development of a security engineering roadmap for future improvements. * Develop and optimize Splunk searches, dashboards, and alerts to enhance security operations * Define and manage index clustering, search head clustering, and forwarder deployment. * Lead end-to-end Splunk deployment and configuration projects, including infrastructure planning, installation, and integration. * Troubleshoot complex Splunk issues involving search performance, indexing, ingestion, parsing, data availability, clustering, storage, authentication, configuration, and integrations with other security tools, as well as providing root-cause analysis of Splunk outages, degradation, data loss, ingestion issues and performance problems. * Conduct performance tuning and capacity planning for Splunk Environments * Collaborate with cross-functional teams to integrate Splunk with other security tools and data sources and analyze how Splunk interacts with other security tools throughout the broad security ecosystem. * Help lead discussions regarding Splunk optimization, modernization, consolidation, automation, scalability, and efficiency and develop recommendations for improving Splunk reliability, and availability * Lead the Cribl to Splunk integration and data pipeline optimization, ensuring efficient routing, filtering, transformation, and delivery data into Splunk as well as improve data quality, reduce ingestion, and enhance overall platform performance * Serve as the team's point of contact for security tool operation and management and provide support to Splunk engineers and cross-functional teams. * Embed Splunk across a wide range of tools across Enterprise IT operations to ingest endpoint and firewall logs, analyze vulnerability scanning data, enhance privileged access monitoring and audit logging, monitor encryption and key management, and enhance threat detection and incident response. * Integrate tools such as CrowdStrike, Cribl, CyberArk, Tenable, CASB, Trellix, Axonius, and others. ## Related Videos - [Tips and Tricks for Working with JSON](https://www.wearedevelopers.com/videos/1229-tips-and-tricks-for-working-with-json) - [Optimizing Discovery: PostgreSQL's Role in Transforming GetYourGuide's Search](https://www.wearedevelopers.com/videos/1647-optimizing-discovery-postgresql-s-role-in-transforming-getyourguide-s-search) - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Building a Compiler with C#](https://www.wearedevelopers.com/videos/116-building-a-compiler-with-c) - [Dynamic Entities in .NET: Building Low-Code Systems on Top of Entity Framework Core](https://www.wearedevelopers.com/videos/100218-dynamic-entities-in-net-building-low-code-systems-on-top-of-entity-framework-core) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers)