Senior Splunk SIEM & Threat Detection Engineer

Mantis Security Corporation; Reston (VA); On-site; USD 140,000 - 190,000; Full time

Job summary

Mantis Security Corporation is seeking an experienced SIEM Engineer to join our team in Reston, VA. You will help improve threat detection by ensuring security data is collected, correlated, and transformed into effective detections, working closely with SOC analysts and engineers.

You will develop Splunk searches and dashboards, tune detection logic, onboard log sources, and translate attacker techniques into actionable detections.

Qualifications

• 10+ years of cybersecurity experience with hands-on SIEM or security monitoring
• Strong Splunk experience with SPL searches, correlation searches, dashboards and alerts
• Experience developing and tuning detections in a SOC environment
• Understanding of security logging across Windows, Linux, network, endpoint, identity, and cloud
• Experience onboarding and troubleshooting security data sources within a SIEM
• Strong ability to translate attacker techniques into detection logic
• Familiarity with MITRE ATT&CK, incident response and threat hunting
• Relevant cybersecurity or SIEM certifications such as Security+, CySA+, GIAC, or Splunk certification

Responsibilities

• Develop, tune, and maintain Splunk searches, alerts, correlation rules, and dashboards
• Build and improve detection logic to identify suspicious activity while reducing false positives
• Support onboarding, parsing, normalization, and validation of security log sources
• Identify gaps in logging, telemetry, and detection coverage and implement improvements
• Translate emerging threats into actionable detections using MITRE ATT&CK
• Support SOC investigations and threat hunting with queries across data sources
• Troubleshoot SIEM data ingestion, search, alerting, and performance issues
• Document detection logic, configurations, processes, and improvements

Skills

SIEM

Splunk

Threat detection

SOC operations

Dashboard development

Security monitoring

Threat hunting

MITRE ATT&CK

Education

Security+ / CySA+ / GIAC

Splunk Certification

Tools

Splunk

Job description

Mantis Security Corporation is seeking an experienced SIEM Engineer to join our team in Reston, VA. You will help improve threat detection by ensuring security data is collected, correlated, and transformed into effective detections, working closely with SOC analysts and engineers.

You will develop Splunk searches and dashboards, tune detection logic, onboard log sources, and translate attacker techniques into actionable detections.