Mid-Level Splunk Engineer

We are seeking an active TS/SCI cleared Mid-Level Splunk Engineer to join our team supporting the 16th Air Force at Joint Base San Antonio. In this role, you will deliver day-to-day engineering services centered on dashboard creation, data troubleshooting, alert tuning, and security detection support within Splunk Enterprise Security (ES). This on-site engagement is ideal for a candidate with 2+ years of Splunk experience looking to apply their skills in a high-impact military cyber environment., Dashboarding & Visualizations: Create, troubleshoot, and optimize Splunk dashboards, data panels, and custom alerts to support operational situational awareness. Detection Support: Assist in building, testing, and refining cybersecurity detection rules within Splunk Enterprise Security (ES). Data Onboarding & Troubleshooting: Diagnose and resolve data ingestion issues, query errors, and dashboard performance bottlenecks. Automation Engineering: Support the creation and maintenance of automated response actions and alert workflows. Status Reporting: Maintain accurate task tracking and submit weekly status reports summarizing work accomplishments and blocking items.

Clearance: Active TS/SCI Experience: 2+ years of hands-on experience working in Splunk engineering or administration roles. Technical Skills: Strong proficiency with Splunk Core searching, dashboard development, and basic administration. Hands-on experience working with Splunk Enterprise Security (ES) and standard SIEM workflows. Solid understanding of log onboarding, field extractions, and SPL query construction.

Preferred / Nice-to-Have Working knowledge or exposure to Splunk SOAR (Phantom) or Splunk ITSI. Splunk Core Certified Power User or Admin certification.