Splunk SOAR Engineer

Leidos; Suitland (MD); On-site; USD 108,000 - 195,000; Full time

Job summary

Leidos in Suitland, MD is seeking a Splunk SOAR Engineer to provide engineering, operations, and technical support for SIEM platforms serving threat detection and incident management for the HGCC. You will design, deploy, and maintain backend architecture and administer the SOAR platform with integrations and playbooks.

The role requires active TS/SCI clearance, 8+ years in CND engineering, and 6+ years with Splunk including Enterprise Security and SOAR.

Qualifications

• Active TS/SCI security clearance.
• 8+ years in engineering for Computer Network Defense (CND).
• 6+ years with Splunk and related tools.
• Master's/Bachelor's degree as stated.
• Strong analytical and problem-solving skills.

Responsibilities

• Design, deploy, and maintain backend architecture.
• Administer the SOAR platform and integrations.
• Develop automated SOAR playbooks for alert triage and response.
• Integrate SOAR with Splunk ES, tickets, and threat feeds.
• Manage clustering, indexing performance, and license usage.
• Apply DISA STIGs, SRGs, and NAVINTEL baselines.
• Maintain version control, workflows, and playbook governance.
• Configure secure transmission of Audit.XML to IC partners.
• Implement incident response workflows aligned with MITRE ATT&CK and NIST 800-61.
• Travel between NMIC and CONUS/OCONUS locations as needed.

Skills

TS/SCI clearance

Splunk expertise

IAT Level III cert

Splunk Enterprise Security

Splunk SOAR

CND engineering experience

SDLC

Analytical skills

Communication skills

Network defense experience

Education

Bachelor's degree in Computer Science/Information Technology/Information Assurance

Master's degree (preferred) with 6+ years experience

15+ years experience in lieu of degree in LAN/WAN

Tools

Splunk

Splunk Add-ons

Splunk Apps

Technology Add-ons (TAs)

Universal Forwarder

Job description

Description

Splunk SOAR Engineer

Location: Suitland, MD

Security Clearance: Active TS/SCI Required

Leidos is hiring a Splunk SOAR Engineer to join our team in Suitland, MD. In this role, you will provide engineering, operations, and technical support for Security Information and Event Management (SIEM) platforms that support threat detection, compliance, and security incident management for the Office of Naval Intelligence's Hopper Global Communications Center (HGCC). You will help develop and automate cybersecurity operations while supporting mission critical defensive cyber capabilities.

Primary Responsibilities

• Design, deploy, and maintain EAC backend architecture.
• Administer the SOAR platform, including configuration, asset integrations, and custom fields.
• Design, develop, test, and maintain automated SOAR playbooks for alert triage, enrichment, and risk based response.
• Integrate SOAR with Splunk Enterprise Security, ticketing systems, and threat intelligence feeds.
• Manage clustering, replication, indexing performance, and license usage.
• Apply DISA STIGs, SRGs, and NAVINTEL Information Assurance baselines.
• Maintain version control, approval workflows, and playbook governance.
• Configure and maintain the secure transmission of Audit.XML records to Intelligence Community partners through ITS and troubleshoot transmission failures.
• Implement standard incident response workflows aligned with MITRE ATT&CK, NIST SP 800-61, and HGCC N62 Defensive Cyber Operations procedures.
• Travel may be required between the National Maritime Intelligence Center (NMIC) and other designated CONUS and OCONUS locations in support of program requirements.

Required Qualifications

• Bachelor's degree in Computer Science, Information Technology, Information Assurance, or a related discipline with 8+ years of relevant experience, or a Master's degree with 6+ years of relevant experience. 15+ years of experience, including at least 10 years supporting LAN/WAN technologies, may be considered in lieu of a degree.
• Active TS/SCI security clearance.
• Active IAT Level III certification (such as CISSP).
• 8+ years of engineering experience supporting Computer Network Defense (CND).
• 6+ years of experience with Splunk, including Splunk Add-ons, Apps, Technology Add-ons (TAs), and Universal Forwarder.
• Expert knowledge of Splunk, including Splunk Enterprise, Splunk Enterprise Security, and Splunk SOAR.
• Significant experience with the System/Software Development Life Cycle (SDLC).
• Strong analytical and problem solving skills.
• Effective verbal and written communication skills.

Original Posting

August 4, 2026

For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range

Pay Range $107,900.00 - $195,050.00

The Leidos pay range for this job level is a general guideline onlyand not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

About Leidos

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit www.Leidos.com.

Pay And Benefits

Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at www.leidos.com/careers/pay-benefits.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.