Senior Splunk Engineer

Job Description

HII’s Mission Technologies division is dedicated to delivering cutting-edge solutions that advance national security and defense objectives. This position is part of our Cyber and Intelligence division, which plays a critical role in supporting Enterprise-Level Security and Modernization efforts across IT infrastructure, cybersecurity, physical facilities, and personnel operations.                                                                              

The selected candidate will contribute to a high-impact government program focused on enhancing and securing mission-critical systems and environments. The program is scheduled to launch in early 2026 and due to the classified nature of the mission and the sensitivity of the operational environment, an active TS/SCI security clearance will be required. Candidate must be willing to obtain and maintain a CI poly.

Information Assurance Engineer 2: $85,371 - $118,529

Information Assurance Engineer 3: $104,519 - $140,599

Information Assurance Engineer 4: $135,472 - $192,103

Essential Job Responsibilities

• You will strengthen the organization’s cyber defense posture by engineering, optimizing, and maintaining Splunk based security monitoring and analytics capabilities. In this role, you transform cybersecurity requirements into actionable detection logic, dashboards, data models, and workflows that support continuous monitoring and incident response operations.
• Key responsibilities include working closely with cybersecurity teams to understand threat scenarios, developing and tuning correlation searches, and engineering data ingestion pipelines for high value security log sources. You will create dashboards, visualizations, and alerts to support threat hunting, incident investigations, and compliance reporting. 
• You may also contribute to solution design activities such as data mapping, field extraction, log onboarding strategies, and proof of concept integrations. 
• Additionally, you will validate detection logic through testing, troubleshoot data quality issues, and ensure Splunk content aligns with security policies, operational needs, and mission requirements.

Minimum Qualifications

• 2-9+ years relevant experience with Bachelors in related field OR
• 0-7+ years experience with Masters in related field OR 
• High School Diploma or equivalent and 6-13+ years relevant experience.

• 7+ years implementing and maintaining CND technologies on enterprise WANs

• 4+ years experience with SIEM and/or vulnerability scanner products

• 4+ years experience maintaining and operating Red Hat Enterprise Linux (RHEL) servers.

• Active TS/SCI w/ ability to obtain and maintain a CI poly.

Preferred Requirements

• 4+ years experience with Splunk (or equivalent SIEM)
• 4+ years Tenable/ACAS (or equivalent vulnerability scanner), experience evaluating technologies against DISA STIGs and providing remediation guidance.
• Associate to Intermediate-level Splunk certification (e.g., Splunk Enterprise Certified Admin)
• Intermediate to Advanced Spunk certifications (e.g., Splunk Enterprise Security Certified Admin, Splunk IT Service intelligence certified admin, Splunk SOAR Certified Automation Developer) Ansible, or equivalent related coursework.