Splunk Security Detection Engineer

United Global Technologies; Idaho Falls (ID); Remote; USD 120,000 - 190,000; Full time

Job summary

United Global Technologies is seeking a highly skilled Splunk Security Engineer for an onsite role in Idaho Falls, ID. The candidate must hold current L, Q, or TS clearance and be willing to relocate.

You will design, build, and tune detections across diverse data sources using SPL, ES, DSDL, and AITK, aligning coverage to MITRE ATT&CK. Collaborating with threat intel, IR, and SOC teams, you will reduce alert fatigue, implement detection-as-code with Git/CI/CD, and develop runbooks and

Qualifications

• Must have current, not active, DOE L, Q or TS clearance.
• Willingness to relocate to Idaho Falls, ID and work onsite with no remote option.
• Deep expertise in Splunk SPL, ES, DSDL, AITK, and MITRE ATT&CK mapping.
• Experience with detection-as-code practices and CI/CD.
• Prior SOC, threat hunting, or incident response experience preferred.

Responsibilities

• Design, develop, and maintain detection content using Splunk SPL to identify threats across diverse data sources.
• Build and tune correlation searches, notable events, and risk-based alerting within Splunk ES.
• Leverage DSDL to develop ML models for anomaly detection and threat identification.
• Use AITK to develop ML-driven detections beyond signatures.
• Map detection coverage to MITRE ATT&CK and identify visibility gaps.
• Collaborate with threat intel, IR, and SOC to translate threats into detections.
• Reduce false positives through lifecycle management and tuning.
• Develop and maintain detection-as-code workflows with Git/CI/CD.
• Create runbooks, documentation, and detection specifications.

Skills

Splunk SPL

Splunk Enterprise Security

Splunk AI Toolkit

DSDL (Deep Learning)

MITRE ATT&CK

Threat hunting

Incident response

Threat detection

Education

Splunk certifications (Power User/Admin, ES Certified Admin)

GIAC certification

Tools

Git

CI/CD pipelines

SOAR platforms

Python

Job description

United Global Technologies is seeking a highly skilled Splunk Security Engineer for an onsite role in Idaho Falls, ID. The candidate must hold current L, Q, or TS clearance and be willing to relocate.

You will design, build, and tune detections across diverse data sources using SPL, ES, DSDL, and AITK, aligning coverage to MITRE ATT&CK. Collaborating with threat intel, IR, and SOC teams, you will reduce alert fatigue, implement detection-as-code with Git/CI/CD, and develop runbooks and