Senior Information System Security Engineer (Splunk Engineer)

MITRE; Bedford (MA); On-site; USD 129,000 - 194,000; Full time

Job summary

MITRE is seeking a Senior Information Systems Security Engineer focused on Splunk in classified environments to lead enterprise security posture enhancements. The role involves integration of security into large engineering programs, and collaboration with sponsors to deliver high-impact monitoring and dashboards.

The ideal candidate will possess extensive Splunk expertise on Linux/Windows, strong scripting skills (Python, Bash, PowerShell), and the ability to communicate complex security

Qualifications

• Minimum 5 years of related experience with a Bachelor's degree; or 3 years with a Master’s; or PhD with relevant experience.
• Deep understanding of Splunk architecture, administration, and management on Linux and Windows.
• Proficiency in scripting languages like Python, Bash, or PowerShell for automating tasks related to Splunk.
• Must meet DoD 8570.01M IAM Level III requirements and hold active Top Secret/SCI with Polygraph.

Responsibilities

• Infrastructure management: Design, deploy, and maintain Splunk environments including clusters, indexers, and forwarders.
• Data onboarding: Identify and integrate new data sources into Splunk, creating data inputs, indexes, and source types.
• Data analysis and reporting: Develop SPL dashboards, apps, reports, and alerts to visualize trends.
• Troubleshooting and optimization: Monitor health, troubleshoot issues, and optimize search and retention.
• User support and collaboration: Gather requirements, assist with searches, and train users.
• Security: Manage updates, patching, and STIG compliance for Splunk environments.
• Design and develop dashboards and alerts aligned with NIST 800-53 for compliance and monitoring.

Skills

Splunk architecture

Splunk administration

Python scripting

PowerShell scripting

Linux/Windows

Security clearance

DoD IAM III

Stakeholder coordination

Communication

Education

Bachelor's degree or higher

Tools

Splunk

SPL

Job description

At MITRE, your passion fuels work that impacts our nation and improves lives. This is where your skills strengthen national security, cybersecurity, health, transportation, and citizen services. We’re a nonprofit engineering, applied research, and advanced technology organization working in the public interest. With objectivity and integrity at our core, we lead federally funded research and development centers for U.S. government agencies – collaborating with industry and academia to deliver integrated, high-impact solutions that advance our nation’s health, security, and prosperity. Our people tackle the toughest technical challenges, supported by competitive benefits, meaningful career development, and a culture of innovation, collaboration, and technical excellence. Choose MITRE for a career with purpose — and help shape the future.

The Cybersecurity Risk Management Department (R311) within the Global Security Division (R300) is looking to fill a Senior Information Systems Security Engineer position, with a focus on Splunk in classified environments. The selected candidate will support multiple sponsors by providing technical support and engineering for a computing system’s technical posture operating in an isolated enclave consisting of high-performance computer environments as well as celestial and terrestrial labs.

The ideal candidate will thrive in a fast-paced, collaborative environment, working with cutting-edge technology and contributing to advanced security concepts in classified settings. We seek a proactive individual to lead efforts in integrating security into large engineering projects and acquisition initiatives.

Success in this role requires expertise in a wide range of cybersecurity topics, including strategy, planning, policies, procedures, governance, management, protection, detection, mitigation, and cyber and military operations. Strong verbal and written communication skills are essential for presenting findings, making actionable recommendations, and sharing innovative ideas with Senior Government Sponsors.

The selected candidate will collaborate with System Administrators and Information System Security Officers/Managers to maintain the operations of Splunk environments. The candidate will work with logs from Windows, Linux, Palo Alto and Cisco devices to ensure proper data ingestion into Splunk, enabling effective monitoring, troubleshooting, and the creation of actionable dashboards and alerts to support operational and security objectives. They will demonstrate strong problem-solving skills to develop appropriate mitigation strategies and ensure Splunk systems are configured and operated in compliance with Security Technical Implementation Guides (STIG) requirements.

The candidate will manage Splunk user roles, permissions, authentication mechanisms, configuration files, data inputs, and forwarders. The successful candidate will be responsible for the analysis, integration, testing, operations, and maintenance of Splunk system security. They will assist during external security inspections and ensure compliance for all department Splunk environments.

Roles & Responsibilities

• Infrastructure management: Design, deploy, and maintain Splunk environments, including clusters, indexers, and forwarders, ensuring high availability, scalability, and performance.
• Data onboarding: Identify and integrate new data sources into Splunk, creating and managing data inputs, indexes, and source types.
• Data analysis and reporting: Develop custom dashboards, apps, reports, and alerts using SPL to visualize trends and provide actionable insights.
• Troubleshooting and optimization: Monitor the health of the Splunk environment, troubleshoot issues, and optimize search performance and data retention policies.
• User support and collaboration: Work with end-users to gather requirements, assist with searches, and provide training on Splunk usage and best practices. Collaborate with IT, security, and other teams to meet business needs.
• Security: Ensure the security of the Splunk environment, which can include managing security updates, patching vulnerabilities, resolving STIGs, and using Splunk for security event monitoring and incident response.
• Design and develop Splunk dashboards and alerts that align with NIST 800-53 audit requirements to ensure compliance with federal security standards and provide actionable insights for monitoring and reporting.

Basic Qualifications

• Typically requires a minimum of 5 years of related experience with a Bachelor’s degree; or 3 years and a Master’s degree; or a PhD with relevant experience who can immediately contribute at this job step; or equivalent combination of related education and work experience.
• Deep understanding of Splunk architecture, administration, and management on Linux and Windows infrastructure.
• Proficiency in scripting languages like Python, Bash, or PowerShell for automating tasks related to Splunk.
• Strong analytical and problem-solving skills to troubleshoot complex issues in large scare distributed systems.
• Hands-on experience with medium to large enterprise Splunk environments.
• Knowledge of classified infrastructure and the A&A process.
• Ability to communicate complex technical concepts clearly to both technical and non-technical audiences.
• Self-starter that takes initiative to coordinate with stakeholders across multiple teams to complete projects.
• Must meet DoD 8570.01M IAM Level III requirements.
• Must have an active Top Secret/SCI U.S Government issued Security Clearance with the ability to obtain and maintain a Top Secret/SCI w/Poly U.S. Government issued Security Clearance. Per the U.S. Government’s eligibility requirements, you must be a U.S Citizen to be considered for a security clearance.
• This position has an on-site requirement of 5 days a week on-site.

Preferred Qualifications

• Active TS/SCI with CI Poly Security Clearance.
• Experience in SPL, data onboarding, custom apps and creating visualizations.
• Knowledge of emerging IT and cybersecurity technologies.
• Experience with Windows, RHEL, virtualization, and networking within enterprise environments.
• Proven ability to advise senior leadership on risk levels, security posture, and policy changes.
• Previous experience operating as a SCI/SAP ISSO, ISSE, System Administrator, or ISSM.
• Strong analytical and problem-solving skills, with the ability to develop innovative solutions.
• Experience mentoring junior staff and fostering a collaborative team environment.
• Familiarity with insider threat programs and strategies for mitigating insider risks.

This requisition requires the candidate to have a minimum of the following clearance(s)

Top Secret/SCI

This requisition requires the hired candidate to have or obtain, within one year from the date of hire, the following clearance(s)

Top Secret/SCI/Polygraph

Salary compensation range and midpoint

$129,200 - $161,500 - $193,800 Annual

Work Location Type

Onsite

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local or international law.

MITRE intends to maintain a website that is fully accessible to all individuals. If you are unable to search or apply for jobs and would like to request a reasonable accommodation for any part of MITRE’s employment process, please email [e-mail] for general support and [e-mail] for intern positions. This service is for individuals requiring reasonable accommodation requests. Please note that vendor solicitations will not receive a reply.

Benefits information may be found here.

Copyright © 1997-2026, The MITRE Corporation. All rights reserved. MITRE is a registered trademark of The MITRE Corporation. Material on this site may be copied and distributed with permission only.