Senior Splunk Cyber Security Engineer

MANTECH; Chantilly (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

MANTECH is seeking a Senior Splunk Cyber Security Engineer to join our Chantilly, VA team. You will support a mission-critical initiative by administering and engineering a large enterprise Splunk environment, collaborating with cyber analysts and IT teams.

The role requires hands-on experience with Splunk administration, ES operations, Unix/Windows systems, and a DoD 8570 IAT Level II certification. A TS/SCI with CI Poly is required.

Qualifications

• Bachelor's degree or 4+ years of cybersecurity experience in lieu of a degree.
• 5+ years of experience in enterprise or cybersecurity-focused environment.
• Experience with Splunk administration and engineering.
• Experience with Splunk Enterprise Security (ES) operations and configurations.
• Proficiency with Unix and Windows environments.
• DoD 8570 IAT Level II certification (e.g., Security+, CCNA-Security, GSEC).

Responsibilities

• Manage the day-to-day operation of large enterprise Splunk deployments.
• Troubleshoot data collection issues and resolve system conditions affecting stability or integrity.
• Deploy and maintain both supported and unsupported Splunk add-ons.
• Execute Splunk Enterprise upgrades and patches.
• Configure and deploy Splunk forwarders using centralized management tools.
• Maintain and tune Splunk Enterprise Security (ES) content and performance.
• Manage knowledge objects, data models, dashboards, alerts, and operational content.
• Support API integrations and external system connectivity.
• Develop and maintain detailed engineering and compliance documentation.
• Contribute to Splunk deployment and architecture diagrams and system documentation.

Skills

Splunk administration

Splunk Enterprise Security

Unix

Windows

DoD 8570 IAT Level II

Education

Bachelor’s degree

Tools

Splunk

UNIX

Windows

Job description

MANTECH seeks a motivated, career, and customer-oriented Senior Splunk Cyber Security Engineer to join our team in Chantilly, VA.
In this role, you will support a mission-critical initiative and contribute directly to cybersecurity operations through the administration and engineering of a large enterprise Splunk environment. This position is ideal for professionals with strong hands‑on experience in system integration, data management, and cyber defense initiatives. You will play a key role in maintaining and tuning Splunk systems, while collaborating with technical teams and cyber analysts across a dynamic enterprise environment.

Responsibilities Include, But Are Not Limited To

• Managing the day-to-day operation of large enterprise Splunk deployments
• Troubleshooting data collection issues and resolving system conditions affecting stability or integrity
• Deploying and maintaining both supported and unsupported Splunk add-ons
• Executing Splunk Enterprise upgrades and patches
• Configuring and deploying Splunk forwarders using centralized management tools
• Maintaining and tuning Splunk Enterprise Security (ES) content and performance
• Managing knowledge objects, data models, dashboards, alerts, and operational content
• Supporting API integrations and external system connectivity
• Developing and maintaining detailed engineering and compliance documentation
• Contributing to Splunk deployment and architecture diagrams and system documentation

Minimum Qualifications

• Bachelor’s degree, or 4+ additional years of cybersecurity experience in lieu of a degree
• 5+ years of experience in an enterprise and/or cybersecurity-focused environment
• Experience with Splunk administration and engineering
• Experience with Splunk Enterprise Security (ES) operations and configurations
• Proficiency with Unix and Windows environments
• DoD 8570 IAT Level II certification (e.g., Security+, CCNA-Security, GSEC)

Preferred Qualifications

• Splunk certifications such as Architect, Consultant I/II, Admin, or Power User
• Experience with scripting or programming languages (e.g., Bash, Python, Java, Perl, .NET)
• Familiarity with developing and deploying operational and security use cases within Splunk

Clearance Requirements

• Must have a current/active TS/SCI with CI Polygraph

Physical Requirements

• Must be able to remain in a stationary position 50% of the time
• Occasionally move about inside the office to access file cabinets, office machinery, or to communicate with co-workers, management, and customers via email, phone, or virtual communication, which may involve delivering presentations