Senior Splunk Engineer: SIEM & Threat Detection Expert

Chenega Corporation

Oakton (VA)

On-site

USD 145,000 - 215,000

Full time

6 days ago

Be an early applicant

Application generator

A complete application in a minute — tailored resume and cover letter, ready to send.

Get past ATS filters

Job summary

Chenega MIOS in Arlington, VA is seeking a Senior Splunk Engineer to lead the design, deployment, and optimization of enterprise SIEM capabilities. You will build dashboards, alerts, and correlation searches, and work across security and networking teams to improve threat visibility.

The role requires deep Splunk expertise, robust knowledge of TCP/IP and packet analysis, and the ability to operate in secure enclave environments.

Qualifications

Bachelor’s degree or equivalent IT experience with security focus.
12+ years in cybersecurity or network engineering with Splunk work.
DoD 8140/8570 IAT II level certification required.
U.S. Citizen with active TS/SCI clearance.

Responsibilities

Lead design and optimization of Splunk dashboards, alerts, and data ingestion.
Collaborate with network and ExtraHop teams to integrate flow data into detections.
Develop network baseline visualizations and identify deviations from logs and traffic.
Tune ingestion pipelines to reduce false positives and improve signal fidelity.
Develop Splunk content for firewalls, VPNs, proxies, routers, switches, and endpoints.
Interpret detection triggers with respect to network flows and packet captures.
Maintain Splunk components including apps, indexes, forwarders, and CIM data models.
Produce runbooks and training for SOC teams and stakeholders.
Support secure enclave deployments of Splunk and mentor junior engineers.
Other duties as assigned.