DoD TS Cleared SIEM Detection Engineer (Splunk)

MartinFederal Consulting, LLC; Washington (District of Columbia); On-site; USD 110,000 - 180,000; Full time

Job summary

MartinFed is seeking an experienced SIEM Detection Engineer to develop, tune, and maintain detection content for government security monitoring. You will own correlation searches, alerts, and use cases built in Splunk, aligning detections to MITRE ATT&CK and threat intelligence.

You will collaborate with security analysts and platform engineers to ensure accurate detections with minimal noise, while supporting dashboards and incident response activities.

Qualifications

• SPL: correlation searches and alert thresholds.
• Security use cases mapped to MITRE ATT&CK.
• Alert tuning to reduce false positives.

Responsibilities

• Develop, tune, and maintain detection content in Splunk.
• Design security use cases aligned to MITRE ATT&CK.
• Tune detections to minimize noise while preserving coverage.
• Build dashboards for SOC triage and investigations.
• Support incident response with detection context.

Skills

SPL Detection

MITRE ATT&CK mapping

Alert tuning

Threat intelligence

Dashboard visualization

Detection testing

Splunk ES

Incident response

Endpoint/network/cloud patterns

Tools

Splunk Enterprise Security

Job description

MartinFed is seeking an experienced SIEM Detection Engineer to develop, tune, and maintain detection content for government security monitoring. You will own correlation searches, alerts, and use cases built in Splunk, aligning detections to MITRE ATT&CK and threat intelligence.

You will collaborate with security analysts and platform engineers to ensure accurate detections with minimal noise, while supporting dashboards and incident response activities.