Remote Splunk Engineer — Cybersecurity Specialist

SAIC; United States; Remote; USD 100,000 - 140,000; Full time

Benefits offered by this job

Remote work

Job summary

SAIC invites applications for a Cybersecurity Specialist, Splunk Engineer. This role can be remote within the United States and supports the Enterprise Security Operations Center by maintaining Splunk and related SIEM tools, developing detections, and building dashboards.

The candidate will onboard data sources, optimize correlations, and collaborate with Azure and AWS environments while mentoring ESOC staff and ensuring secure, reliable operations.

Qualifications

• Bachelor’s degree in a related field with 5+ years of cybersecurity/analysis experience, or advanced degree with 3+ years.
• Experience administering and engineering Splunk, with relevant certifications in Splunk Core Admin.
• Must obtain Splunk Core Certified Admin within 3 months, Azure Fundamentals within 6 months, AWS Practitioner within 9 months.
• US Citizenship and ability to work flexible hours including on-call rotations.

Responsibilities

• Administer, configure, and maintain Splunk (cloud and on‑prem) and SIEM tools.
• Develop, audit, and optimize correlation rules; craft new detections with ESOC.
• Build dashboards, reports, alerts, and visualizations; tune SPL queries.
• Onboard data sources (syslog, HEC, forwarders, APIs) and manage data sources.
• Support deployment servers/forwarders and maintain cloud integrations (Azure/AWS).
• Develop scripts/integrations with security tools (Python, Bash, PowerShell).
• Collaborate with stakeholders, mentor ESOC members, and ensure compliance.

Skills

Splunk administration

Cybersecurity operations

Scripting (Python/Bash)

Cloud security concepts

Education

Bachelor’s Degree

Master’s Degree

Tools

Splunk

Azure

AWS

Job description

SAIC invites applications for a Cybersecurity Specialist, Splunk Engineer. This role can be remote within the United States and supports the Enterprise Security Operations Center by maintaining Splunk and related SIEM tools, developing detections, and building dashboards.

The candidate will onboard data sources, optimize correlations, and collaborate with Azure and AWS environments while mentoring ESOC staff and ensuring secure, reliable operations.