Senior Splunk Engineer – TS/SCI, CI Poly

Jobtailor; Washington (District of Columbia); On-site; USD 145,000 - 190,000; Full time

Job summary

Jobtailor is seeking an experienced security operations specialist to implement and optimize the Splunk platform for client environments. You will develop custom playbooks, integrate tools, and build dashboards tailored to customer requirements.

Ideal candidates bring TS/SCI with CI Polygraph, strong Linux scripting skills (Python, Ansible, Terraform, JSON), and a background in SOC settings. Travel may be required to meet client needs.

Qualifications

• Requires TS/SCI with CI Polygraph and Security+ or CISSP.
• Minimum 7–10 years of related work experience in security operations.

Responsibilities

• Implement, manage, and optimize the Splunk platform to automate and orchestrate security operations
• Develop custom playbooks for various stakeholders
• Integrate Splunk with other security tools
• Create custom Splunk reports, dashboards, and content according to customer requirements
• Troubleshoot Splunk instances
• Work with clients to analyze and understand their needs and objectives
• Serve as the escalation level for complex issues
• Aid Associate, Level I, and Level II Engineers on sophisticated tasking

Skills

Splunk Platform Management

Custom Playbook Development

Splunk Report Creation

Troubleshooting Splunk Instances

Linux

Python

Ansible

Terraform

JSON

Splunk SOAR Deployment

Tools

Splunk

Cribl Stream

SIEM

SOC

Job description

Job Responsibilities

• Implement, manage, and optimize the Splunk platform to automate and orchestrate security operations
• Develop custom playbooks for various stakeholders
• Integrate Splunk with other security tools
• Enhance the organization's overall security posture
• Create custom Splunk reports, dashboards, and content according to customer requirements
• Troubleshoot Splunk instances
• Execute tasks outlined in the scope of work and follow standard operating procedures with minimal oversight
• Work with clients to analyze and understand their needs and objectives
• Serve as the escalation level for complex issues
• Aid Associate, Level I, and Level II Engineers on sophisticated tasking

Requirements

• Currently holds a TS/SCI with CI polygraph
• Security certification (e.g., Security+, CISSP) required
• 7–10 years of related work experience required
• Experience operating in classified environments
• Strong understanding of identity, SIEM, cybersecurity, and infrastructure concepts
• Splunk Core certification required
• Splunk IT Service Intelligence (ITSI) certification desired
• Splunk Certified Architect/Consultant preferred
• Experience with, or interest in learning, deploying, and maintaining Splunk SOAR
• Experience with, or interest in learning, deploying, and maintaining Splunk Enterprise Security
• Experience with, or interest in learning, deploying, and maintaining Cribl Stream
• Strong Linux and scripting experience, including Python, Ansible, Terraform, and JSON
• Experience working in a Security Operations Center (SOC)
• Initial understanding of leadership concepts and ideas
• Strong interpersonal skills and ability to work collaboratively in a team
• Ability to clearly communicate complex messages to varied audiences
• Excellent problem-solving skills with keen attention to detail
• Willingness to travel to meet client needs
• Open to government workers and/or candidates with government experience

Core Competencies

Demonstrates expertise in implementing and optimizing the Splunk platform for security operations, including developing custom playbooks and reports. Possesses strong knowledge of cybersecurity concepts and experience in classified environments, with a focus on collaboration and problem-solving.

Highest-signal resume keywords

• Splunk Platform Management
• Security Certification (Security+, CISSP)
• Splunk Core Certification
• Linux and Scripting (Python, Ansible, Terraform, JSON)
• Experience in Security Operations Center (SOC)

ATS Optimization Keywords

Hard Skills

• Splunk Platform Management
• Custom Playbook Development
• Splunk Report Creation
• Troubleshooting Splunk Instances
• Linux
• Python
• Ansible
• Terraform
• JSON
• Splunk SOAR Deployment

Soft Skills

• Interpersonal Skills
• Collaborative Teamwork
• Clear Communication
• Problem-Solving
• Attention to Detail

Certifications & Qualifications

• TS/SCI with CI Polygraph
• Security+
• CISSP
• Splunk Core Certification
• Splunk IT Service Intelligence (ITSI) Certification

Industry Keywords

• Classified Environments
• Cybersecurity
• Identity Management
• Infrastructure Concepts
• Government Experience

Tools & Technologies

• Splunk
• Cribl Stream
• SIEM
• Cybersecurity Tools
• Security Operations Center (SOC)