Senior Splunk Engineer — SIEM Dashboards & Threat Detection

Chenega Agile Real Time Solutions, LLC; Oakton (VA); On-site; USD 145,000 - 215,000; Full time

Job summary

Chenega MIOS is seeking a Senior Splunk Engineer in Arlington, VA to lead enterprise SIEM improvements, dashboard design, and detection engineering. You will partner with network teams and SMEs to refine alert logic across secured environments and ensure high-fidelity detections.

The role requires strong SPL skills, deep Splunk knowledge, and DoD 8570/IAT II certification. You will mentor junior staff and contribute to runbooks, training, and secure enclave deployments.

Qualifications

• Bachelor’s degree in a related field or equivalent experience preferred.
• 12+ years of cybersecurity or network engineering with 3+ years of Splunk engineering and content development.
• Hands-on experience with Splunk Enterprise and ES in secure environments.
• DoD 8140 or 8570 baseline certification at IAT Level II or higher.

Responsibilities

• Lead the design and optimization of Splunk dashboards, alerts, correlation searches, and data ingestion for security and network observability.
• Collaborate with network and ExtraHop teams to integrate flow data into Splunk detections.
• Develop network baseline visualizations and identify deviations using log and traffic data.
• Tune log sources and ingestion pipelines to reduce false positives and improve fidelity.
• Create Splunk content for firewalls, VPNs, proxies, routers, switches, and endpoints.
• Mentor junior engineers in SPL, dashboards, and detection development.

Skills

Splunk engineering

SPL development

Network monitoring

Threat detection

Log analysis

Dashboards

Scripting

Education

Bachelor’s degree in a related field

Associates degree + 2+ years IT

High school diploma with 4+ years IT

DoD 8140/8570 IAT II certification

Tools

Splunk Enterprise

Splunk Enterprise Security (ES)

ExtraHop

SolarWinds

Job description

Chenega MIOS is seeking a Senior Splunk Engineer in Arlington, VA to lead enterprise SIEM improvements, dashboard design, and detection engineering. You will partner with network teams and SMEs to refine alert logic across secured environments and ensure high-fidelity detections.

The role requires strong SPL skills, deep Splunk knowledge, and DoD 8570/IAT II certification. You will mentor junior staff and contribute to runbooks, training, and secure enclave deployments.