Remote Splunk Engineer: Lead Cloud Security Analytics

Elios AI; United States; On-site; USD 138,000 - 165,000; Full time

Job summary

Elios AI seeks a senior Splunk engineer to own design, deployment, and health of Splunk across AWS and hybrid environments. You will build ingestion from CloudTrail, GuardDuty, and more, delivering dashboards, alerts, and reports used by security and operations teams.

Lead projects with government stakeholders to ensure visibility, compliance, and security. Expect hands-on SPL work and strong AWS integration expertise in a federally regulated setting.

Qualifications

• 8+ years in specialized cloud technologies with 4+ years on AWS.
• Must be a US citizen and hold an active Public Trust clearance
• Splunk Enterprise Certified Admin or Splunk Cloud Certified Admin
• At least one AWS Professional certification or VMware VCP / HashiCorp Terraform Associate
• Proven track record administering Splunk Enterprise and/or Splunk Cloud with AWS integration
• Deep command of SPL, data modeling, search optimization, and dashboard development
• Hands-on experience integrating Splunk with core AWS logging and security services
• Knowledge of AWS security practices, IAM, encryption, and federal compliance (NIST, FISMA, FedRAMP)
• Available to work Eastern Time Zone business hours

Responsibilities

• Design, deploy, configure, and administer Splunk Enterprise and Splunk Cloud end-to-end, including index management and performance tuning
• Build data ingestion strategies for AWS services (CloudTrail, CloudWatch, GuardDuty, Security Hub, Config, VPC Flow Logs)
• Write advanced SPL searches, correlation searches, data models, and knowledge objects for threat detection and incident response
• Create dashboards, reports, alerts, and executive reporting for security monitoring and BI
• Integrate Splunk with AWS security services and enterprise monitoring tools
• Support cloud migration and modernization by onboarding apps and services into Splunk
• Automate post-deployment activities, health checks, and alert configuration using scripting and AWS tools
• Configure Splunk Federated Search for cross-environment search and reporting
• Lead collaboration with cloud engineers, security teams, and government stakeholders
• Back monthly releases by validating ingestion and updating dashboards

Skills

SPL

dashboards

Data modeling

Threat detection

Incident response

AWS integration

Compliance awareness

Cloud migrations

Automation (Python/PowerShell/Bash)

Education

Bachelor's degree in a related field

Splunk Enterprise Certified Admin

Splunk Cloud Certified Admin

AWS Professional certification (Solutions Architect/DevOps)

Terraform Associate / VMware VCP

Tools

Python

PowerShell

Bash

AWS CLI

CloudFormation

Terraform

Splunk Enterprise

Splunk Cloud

Job description

Elios AI seeks a senior Splunk engineer to own design, deployment, and health of Splunk across AWS and hybrid environments. You will build ingestion from CloudTrail, GuardDuty, and more, delivering dashboards, alerts, and reports used by security and operations teams.

Lead projects with government stakeholders to ensure visibility, compliance, and security. Expect hands-on SPL work and strong AWS integration expertise in a federally regulated setting.