> Markdown version of [/jobs/ext/4650706-splunk-security-engineer](https://www.wearedevelopers.com/jobs/ext/4650706-splunk-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Splunk Security Engineer

- **Company:** General Dynamics Information Technology
- **Location:** Bergen, Belgium
- **Experience:** Expert
- **Salary:** €107,744 - €138,000
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Information Model, Security Information and Event Management, Splunk
- **Published:** November 10, 2026
- **Apply:** https://gdit.wd5.myworkdayjobs.com/External_Career_Site/job/BEL-Mons---Supreme-HQ-Allied-Powers-EU-APC155/Splunk-Security-Engineer_RQ231823/apply

## About the Role

Bring your cyber expertise and drive for innovation to GDIT. The Splunk Security Engineer must have:

 * Education: BA/BS or equivalent years of experience
 * Experience: 5+ years of related experience
 * Technical skills: Splunk, SPL queries, CIM tuning, Dashboard customization
 * Certifications: IAT Level II or higher, Splunk Enterprise Certified Admin or Splunk Enterprise Security Certified Admin, and ITIL Foundation (within 90 days of hire)
 * Security clearance level: Active Secret required to start
 * Location: On-site in Mons, Belgium
 * Belgian SOFA Requirement: 6-12 week review process submitted to the Belgian government by GDIT on the applicant's behalf. Request will be submitted after candidate is chosen., Years of Experience

5 + years of related experience

 * may vary based on technical training, certification(s), or degree
Certification

CompTIA Security+ CE | CompTIA - CompTIA

ITIL Foundation (Version 5) | PeopleCert - PeopleCert

Splunk Enterprise Certified Admin | Splunk - Splunk
Travel Required

Less than 10%
Citizenship

## Description

Advance your career while impacting our national security in cyber as a Splunk Security Engineer at GDIT. Here, technologists have many paths to grow a meaningful career supporting cyber missions and operations across the federal government., As a Splunk Security Engineer, the work you'll do at GDIT will be impactful to the mission of NATO SOFCOM. You will play a crucial role in providing Senior SIEM Engineering, Splunk Enterprise Security Administration, security data onboarding, and cyber analytics in support of NATO SOFCOM networks.

 * Administer and optimize Splunk Enterprise Security, indexers, search heads, forwarders, deployment servers, indexes and license consumption.
 * Develop and tune SPL queries, correlation searches, dashboards, alerts, security analytics and threat-detection use cases mapped to relevant tactics and techniques.
 * Onboard and normalize authorized log sources, maintain Common Information Model mappings and validate log quality, integrity and retention.
 * Support threat hunting, event triage, incident investigations, evidence collection and coordination with the cybersecurity team.
 * Document approved configuration changes, operating procedures, deployment architecture, incident findings and SIEM health metrics.
 * Support NATO/DoW compliance reporting and continuous improvement of detection coverage, with execution of changes through approved procedures.
 * Design and develop solutions for customer systems and networks.