Senior Splunk Engineer - TS/SCI | SIEM & SOC Automation

Jobtailor; Washington (District of Columbia); On-site; USD 145,000 - 190,000; Full time

Job summary

Jobtailor is seeking an experienced security operations specialist to implement and optimize the Splunk platform for client environments. You will develop custom playbooks, integrate tools, and build dashboards tailored to customer requirements.

Ideal candidates bring TS/SCI with CI Polygraph, strong Linux scripting skills (Python, Ansible, Terraform, JSON), and a background in SOC settings. Travel may be required to meet client needs.

Qualifications

• Requires TS/SCI with CI Polygraph and Security+ or CISSP.
• Minimum 7–10 years of related work experience in security operations.

Responsibilities

• Implement, manage, and optimize the Splunk platform to automate and orchestrate security operations
• Develop custom playbooks for various stakeholders
• Integrate Splunk with other security tools
• Create custom Splunk reports, dashboards, and content according to customer requirements
• Troubleshoot Splunk instances
• Work with clients to analyze and understand their needs and objectives
• Serve as the escalation level for complex issues
• Aid Associate, Level I, and Level II Engineers on sophisticated tasking

Skills

Splunk Platform Management

Custom Playbook Development

Splunk Report Creation

Troubleshooting Splunk Instances

Linux

Python

Ansible

Terraform

JSON

Splunk SOAR Deployment

Tools

Splunk

Cribl Stream

SIEM

SOC

Job description

Jobtailor is seeking an experienced security operations specialist to implement and optimize the Splunk platform for client environments. You will develop custom playbooks, integrate tools, and build dashboards tailored to customer requirements.

Ideal candidates bring TS/SCI with CI Polygraph, strong Linux scripting skills (Python, Ansible, Terraform, JSON), and a background in SOC settings. Travel may be required to meet client needs.