Senior Splunk UBA Engineer - TS/SCI

Leidos Inc; Suitland (MD); On-site; USD 108,000 - 195,000; Full time

Job summary

Leidos Inc. is seeking a Splunk UBA Engineer in Suitland, MD to provide engineering, operations, and technical support for SIEM platforms enabling threat detection and compliance for the HGCC. You will optimize UBA analytics, strengthen threat detection, and support defensive cyber operations.

Responsibilities include administering the SOAR and UBA platforms, validating insights against incidents, and supporting RMF/A&A activities. Travel between NMIC and other CONUS/OCONUS sites may be required.

Qualifications

• Active TS/SCI clearance.
• 8+ years of engineering experience in CND.
• 6+ years of experience with Splunk (UBA, ES) and related tools.
• Experience with SDLC and strong analytical skills.
• Excellent verbal and written communication.

Responsibilities

• Administer and configure the SOAR and UBA platforms.
• Monitor pipeline health, model accuracy, and analytic coverage.
• Tune anomaly detection and reduce false positives.
• Coordinate RMF/A&A activities and security improvements.
• Travel to CONUS/OCONUS locations as required.

Skills

Splunk

UBA (User Behavior Analytics)

SIEM

CND engineering

IAT Level III

Education

Bachelor's degree in Computer Science/Information Technology/Information Assurance

Master's degree (optional)

Tools

Splunk Add-ons

Splunk Apps

Splunk Enterprise Security

Universal Forwarder

Job description

Leidos Inc. is seeking a Splunk UBA Engineer in Suitland, MD to provide engineering, operations, and technical support for SIEM platforms enabling threat detection and compliance for the HGCC. You will optimize UBA analytics, strengthen threat detection, and support defensive cyber operations.

Responsibilities include administering the SOAR and UBA platforms, validating insights against incidents, and supporting RMF/A&A activities. Travel between NMIC and other CONUS/OCONUS sites may be required.