Remote Cybersecurity Splunk Engineer (SIEM & Analytics)

Saic; Tennessee; Remote; USD 100,000 - 140,000; Full time

Job summary

SAIC is seeking a Cybersecurity Specialist, Splunk Engineer to join our Enterprise Security Operations Center. This role may be remote anywhere in the United States, with responsibilities spanning Splunk administration, rule development, dashboards, and data source onboarding.

You will work across Linux/Windows environments, create detections, scripts, and integrations, and mentor ESOC members while communicating with stakeholders to meet security requirements.

Qualifications

• Bachelor’s degree required or equivalent experience.
• 5+ years cybersecurity operation experience or related software/programming experience.
• Experience administering Splunk and SIEM tools.
• Ability to obtain Splunk Core Certified Admin within 3 months and cloud certs within 9 months.

Responsibilities

• Administer, install, configure, and maintain Splunk (cloud and on prem).
• Develop, audit, and optimize correlation rules and detections.
• Build dashboards, reports, alerts, and visualizations.
• Create and optimize SPL queries and knowledge objects.
• Onboard data sources and manage deployment servers and forwarders.
• Collaborate with ESOC and communicate with stakeholders.
• Develop scripts/integrations with security tools (Python, Bash, PowerShell).
• Train and mentor ESOC members on SIEM capabilities.

Tools

Splunk

Azure

AWS

Python

Bash

PowerShell

Job description

SAIC is seeking a Cybersecurity Specialist, Splunk Engineer to join our Enterprise Security Operations Center. This role may be remote anywhere in the United States, with responsibilities spanning Splunk administration, rule development, dashboards, and data source onboarding.

You will work across Linux/Windows environments, create detections, scripts, and integrations, and mentor ESOC members while communicating with stakeholders to meet security requirements.