> Markdown version of [/jobs/ext/454594-senior-splunk-siem-engineer](https://www.wearedevelopers.com/jobs/ext/454594-senior-splunk-siem-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Splunk SIEM Engineer

- **Company:** Apex Systems LLC
- **Location:** Alexandria, VA, United States
- **Experience:** Expert
- **Contract:** Temporary contract
- **Skills:** Amazon Web Services, Microsoft Azure, Bash Shell, Unix, Cluster Analysis, Cyber Security, Linux, Distributed Systems, Intrusion Detection and Prevention, Python (Programming Language), Networking Basics, Parsing, Performance Tuning, Windows PowerShell, Security Information and Event Management, Data Logging, Scripting, Google Cloud, Data Ingestion, Mitre Att&ck, Information Technology, Splunk
- **Published:** June 2, 2026
- **Apply:** https://www.clearancejobs.com/jobs/8950083/senior-splunk-siem-engineer

## About the Role

* Strong SPL skills with dashboards, data models, and search optimization
 * Expertise in data onboarding, CIM mapping, and props/transforms
 * Solid understanding of SIEM operations, SOC workflows, and threat detection
 * Experience with Splunk architecture, clustering, and configuration files
 * Knowledge of Linux/Unix, networking fundamentals, and security tools

Education/Certifications: Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field (or equivalent experience)

Experience: 5-10+ years of hands-on Splunk Enterprise and ES experience. 3+ years of related experience in SIEM engineering, cybersecurity monitoring, or security analytics

Clearance: Candidates must be able to obtain and/or maintain a Department of Defense Top Secret/SCI as a condition and continuation of employment (clearance sponsorship not offered at this time)

Technical Skills:

 * Splunk certifications (Architect, Consultant, ES, Power User)
 * Experience with Splunk SOAR for automation
 * Knowledge of MITRE ATT&CK detection development
 * Scripting skills in Python, Bash, or PowerShell
 * Exposure to cloud logging (AWS, Azure, GCP)
 * Experience supporting federal or regulated environments

## Description

The Senior Splunk Enterprise Security professional serves as a subject matter expert for designing, implementing, tuning, and maintaining Splunk Enterprise and Enterprise Security to support enterprise-level security monitoring, threat detection, and incident response. This role works closely with security engineering, SOC operations, threat intelligence, and IT infrastructure teams to enhance visibility, strengthen detection capabilities, and ensure the overall effectiveness of SIEM operations., * Architect and administer Splunk Enterprise Security in distributed environments

 * Develop correlation searches, RBA models, dashboards, and detections
 * Lead data onboarding, parsing, normalization, and CIM mapping
 * Manage Splunk infrastructure including indexers, search heads, and forwarders
 * Optimize performance, health, and scalability across clustered environments
 * Support detection engineering aligned to MITRE ATT&CK and SOC operations


## Related Videos

- [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture)
- [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker)
- [WeAreDevelopers LIVE - Node and Package Security](https://www.wearedevelopers.com/videos/2138-wearedevelopers-live-node-and-package-security)
- [Better Together: Leveraging Your Observability Tools as a SIEM](https://www.wearedevelopers.com/videos/2118-better-together-leveraging-your-observability-tools-as-a-siem)
- [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker)
- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)

## Related Articles

- [Dev Digest 162: AI careers, MCP, AWS best practices & floppy sweaters](https://www.wearedevelopers.com/magazine/571-dev-digest-162-ai-careers-mcp-aws-best-practices-floppy-sweaters)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)