Senior Splunk Engineer

Xpect Solutions

Washington (District of Columbia)

On-site

USD 100,000 - 130,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Benefits offered by this job

Medical, Dental, and Vision plan

Retirement Savings Plan

Life Insurance

Short Term and Long Term Disability Insurance

3 weeks of annual PTO

11 days of Holiday PTO

Performance Awards

Education Reimbursement/Training

Job summary

Xpect Solutions is seeking a Senior Splunk Engineer to support federal customers in Washington, DC. This role involves designing and implementing Splunk solutions for cybersecurity and compliance. Responsibilities include developing dashboards, leading log ingestion efforts, and ensuring federal security compliance.

The ideal candidate should possess an active Top Secret Clearance, a bachelor's degree, and at least eight years of experience with Splunk. Benefits include health plans, retirement options, and performance awards.

Qualifications

Active Top Secret Clearance and ability to pass a Lifestyle Polygraph.
8 years of relevant experience with Splunk systems.
Proficient in managing Splunk environments and advanced SPL knowledge.

Responsibilities

Lead the deployment and configuration of Splunk solutions.
Create custom dashboards and reports for monitoring and compliance.
Collaborate with cybersecurity teams for threat detection.

Skills

Splunk design and implementation

Splunk Search Processing Language (SPL)

Data onboarding and parsing

Cluster architecture management

Linux/Unix systems administration

REST APIs and scripting tools

Splunk Enterprise Security (ES)

Cloud platforms experience (AWS/Azure)

Education

Bachelor's Degree in relevant discipline

Job description

Job Overview

XPECT Solutions is looking for a dynamic and dedicated Senior Splunk Engineer to support our Federal Customers mission in Washington, DC. The role will provide support for our customers Accounting and Technology Services (ATS). The ATS is responsible for maintaining our customers data repositories. The Senior Splunk Engineer will be responsible for designing, implementing, and optimizing Splunk solutions to support cybersecurity, compliance, and operational visibility across government systems. The role will lead efforts in log ingestion, correlation rule development, dashboard creation, and performance tuning while ensuring alignment with federal security standards.

Core Responsibilities

Lead the deployment and configuration of Splunk Enterprise or Splunk Cloud solutions, ensuring scalability, high availability, and compliance with federal IT standards.
Create custom dashboards, reports, and alerts to support security operations, system monitoring, and compliance reporting.
Ingest and normalize data from diverse sources (e.g., syslogs, APIs, cloud services) using props, transforms, and field extractions.
Collaborate with cybersecurity teams to develop correlation searches, threat detection use cases, and support incident response efforts aligned with NIST and other federal frameworks.
Provide technical guidance to junior engineers and maintain thorough documentation of configurations, processes, and best practices.

Requirements

Active Top Secret Clearance with the ability to pass a Lifestyle Polygraph
Bachelor's Degree in Physics, Mathematics, Information Technology, Computer Science, Business, or related discipline
Eight years of relevant professional experience of applicable technology expertise.
Proficient in designing, implementing, and managing Splunk environments, including cluster architecture.
Advanced knowledge of Splunk Search Processing Language (SPL)
Expertise in developing complex queries, dashboards, and reports using SPL.Ability to optimize searches for performance and scalability.
Strong experience in data onboarding, parsing, and indexing, including log management and extraction of meaningful metrics.
Familiar with various data input methods like Syslog, HTTP Event Collectors (HEC), and APIs.
Knowledge of Splunk Enterprise Security (ES) and/or IT Service Intelligence (ITSI)
Experience in configuring and managing Splunk ES and /or ITSI modules.
Understanding of security information and event management (SIEM) concepts.
Proficiency with REST APIs and other scripting tools (e.g. Python, Bash) to automate tasks and integrations.
In-depth knowledge of Linux/Unix systems administration, including shell scripting and performance tuning.
Familiarity with cloud platforms (AWS and/or Azure) and experience managing Splunk in cloud environments.
Ability to troubleshoot and resolve Splunk performance issues.
Experience with scaling Splunk in large environments and ensuring high availability.