Senior Splunk SOAR Engineer - TS/SCI Clearance

Leidos Inc; Suitland (MD); On-site; USD 108,000 - 195,000; Full time

Job summary

Leidos is hiring a Splunk SOAR Engineer to join our team in Suitland, MD. You will provide engineering, operations, and technical support for SIEM platforms that support threat detection, compliance, and security incident management for the HGCC.

The role involves designing and deploying backend architecture, administering the SOAR platform, developing automated playbooks, and integrating with Splunk ES, ticketing systems, and threat feeds.

Qualifications

• Bachelor's in CS/IT/IA with 8+ years relevant experience.
• Active TS/SCI security clearance required.
• IAT Level III certification (e.g., CISSP) required.

Responsibilities

• Design, deploy, and maintain EAC backend architecture.
• Administer the SOAR platform including config and integrations.
• Develop automated SOAR playbooks for alert triage and response.
• Integrate SOAR with Splunk ES, ticketing systems, and threat feeds.
• Manage clustering, indexing performance, and license usage.

Skills

Splunk

IAT III

TS/SCI

Network Security

Threat Detection

Education

Bachelor's degree in CS/IT/IA

15+ years exp in lieu of degree

Tools

Splunk Add-ons

Splunk Apps

TA(s)

Universal Forwarder

Job description

Leidos is hiring a Splunk SOAR Engineer to join our team in Suitland, MD. You will provide engineering, operations, and technical support for SIEM platforms that support threat detection, compliance, and security incident management for the HGCC.

The role involves designing and deploying backend architecture, administering the SOAR platform, developing automated playbooks, and integrating with Splunk ES, ticketing systems, and threat feeds.