Senior Splunk Security Engineer

Unity Technologies Corporation; Washington (District of Columbia); On-site; USD 130,000 - 190,000; Full time

Job summary

UnityTec in Washington, DC seeks a Senior Splunk Security Engineer to provide information assurance and security engineering support within the DLA Splunk Enterprise environment. You will architect, administer, and develop customized threat-detection content to empower incident response teams, with travel requirements for onsite operations.

Requirements include Linux+ or Splunk admin cert, 7+ years in IT, and experience building dashboards/reports in Splunk.

Qualifications

• Linux+ or Splunk Administrator certification.
• 7+ years IT experience.
• Experience creating custom dashboards and reports in Splunk using threat data.
• Experience integrating Splunk Core and Splunk Enterprise Security (ES).
• Proficient in Cyber Defense Infrastructure Support and System Administration.

Responsibilities

• Drive IA/security engineering across the system lifecycle, from planning to integration.
• Analyze threat intel from logs, IDS, and vendor telemetry to support CERT IH and IAM.
• Administer and maintain the DLA Splunk ELM architecture and backend databases.
• Develop SIEM content using Splunk Enterprise Security to identify threats and support incident responders.

Skills

Linux+ / Splunk cert

Splunk

Threat data analysis

Dashboards in Splunk

Cyber Defense / System Admin

Education

Bachelor's degree in a relevant field

Tools

Splunk Core

Splunk ES

Job description

Company Overview

UnityTec is an SBA-certified Woman-Owned Small Business (WOSB) delivering high-impact professional and technical services to government agencies. With deep expertise in Industrial and Enterprise Systems Modernization, FIAR (Financial Improvement and Audit Readiness), Industrial Facility Transformation, Program and Project Management, Enterprise Support and Consulting, and Advanced Analytics, we empower organizations to modernize operations and advance mission priorities. Our disciplined approach—grounded in dedicated talent, proactive planning, rigorous quality assurance, agile methodologies, cost-effective delivery, and uncompromising ethics—positions UnityTec as a trusted partner committed to achieving measurable, enduring results for our clients.

Job Overview

We are seeking a Senior Splunk Security Engineer to join our team. You will provide comprehensive information assurance and security engineering support by analyzing complex threat intelligence and integrating specialized methodologies to resolve enterprise system vulnerabilities. Additionally, you will architect, administer, and develop customized threat-detection content within the Defense Logistics Agency's (DLA) Splunk Enterprise Log Management (ELM) environment to optimize data mining and empower incident response teams. You will be located in Washington, DC. This position will require travel.

Responsibilities include, but are not limited to:

• Security Engineering and Information Assurance (IA): You are responsible for driving the integration of electronic processes and methodologies to resolve comprehensive system and technology challenges tied to IA requirements. This includes providing end-to-end security engineering support across the entire system lifecycle-encompassing the planning, design, development, testing, demonstration, and integration of secure information systems. You will also apply rigorous analytical and systematic approaches to optimize workflow, organizational alignment, and project planning.
• Threat Intelligence and Incident Response Support: You will conduct deep-dive analyses of threat information synthesized from a diverse array of sources, including system logs, Intrusion Detection Systems (IDS), formal intelligence reports, and vendor telemetry. Leveraging this intelligence, you will provide actionable analysis and strategic recommendations that directly align with and support the operational mandates of Computer Emergency Response Team (CERT) Incident Handlers (IH) and site Information Assurance Managers (IAM).
• Splunk Infrastructure Administration and Architecture Maintenance: You will serve as a primary administrator for the DLA Splunk Enterprise Log Management (ELM) architecture and its associated backend database infrastructure. Duties require full lifecycle management of the platform, meaning you will research, plan, install, configure, troubleshoot, proactively maintain, and execute backups for all architectural components, alongside executing critical system upgrades and daily maintenance routines.
• SIEM Content Development and Advanced Data Analytics: You will utilize Splunk Enterprise Security (ES) as a Security Information and Event Management (SIEM) platform to develop specialized rules, customized reports, data monitors, active channels, and trend analyses. By designing and implementing customized dashboards and tailored use cases, you will successfully identify emerging threats, optimize data mining operations across the DLA, and efficiently elevate high-threat items to critical incident responders.

Required Qualifications:

• A Linux+ or Splunk Administrator certification.
• A minimum of seven (7) years of relevant IT experience.
• Experience creating custom dashboards and reports in Splunk using threat
• data.
• Experience in the integration and sustainment of Splunk Core and Splunk Enterprise Security (ES).
• Highly proficient with Cyber Defense Infrastructure Support -AND- System Administration.

Preferred Qualifications:

• A bachelor's degree in a relevant field of study.
• Relevant certification meeting DOD 8570/8140 IAT level III.
• Relevant certification meeting DOD 8570/8140 CND-IS.

Clearance Requirements:

• Must be a U.S. citizen
• Must possess a DoD current Secret clearance.

UnityTec is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.